CVE-2010-0996

Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file

published April 20, 2010

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file. NOTE: the vendor disputes the significance of this issue, noting that "an odd set of preferences and a missing file" are required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01897 · 79.5th percentile
Published
2010-04-20T16:00Z
EPSS history
Timeline
  • 20 APR 16:00Z
    Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file
    cvelistv5