Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
e107 Permissions Privileges and Access Controls Vulnerability - CVE-2010-2099 - Vulnerability Database
e107

e107 Permissions Privileges and Access Controls Vulnerability - CVE-2010-2099

High
Reference: CVE-2010-2099
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-2099
Title: e107 Permissions Privileges and Access Controls Vulnerability
Overview:

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag which allows remote attackers to execute arbitrary PHP code as demonstrated using the toEmail method in contact.php related to invocations of the toHTML method.