PT-2026-2392 · E107 Cms · E107 Cms

Hubert Wojciechowski · Publicado 2026-01-13 · Atualizado 2026-01-15 · CVE-2022-50916

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions e107 CMS version 3.2.1

Description The application contains a file upload issue that allows administrators with authentication to overwrite server files using the Media Manager import functionality. Specifically, attackers can manipulate the upload URL parameter to overwrite files such as top.php within the web application directory.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the Media Manager import functionality.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2022-50916

Produtos afetados

E107 Cms

Referências · 7

• 🔥 https://exploit-db.com/exploits/50910 · Exploit
• https://e107.org/download · Nota
• https://osv.dev/vulnerability/CVE-2022-50916 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-50916 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011759615864717513 · Publicação no Twitter
• https://e107.org · Nota
• https://vulncheck.com/advisories/e-cms-upload-restriction-bypass-authenticated-admin-server-file-override · Nota