Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when…
Priority LOW 34Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.
Why it matters now
EPSS 0.02069 81st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:* | 0.7 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:* | 0.7.1 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:* | 0.7.2 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:* | 0.7.3 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:* | 0.7.4 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:* | 0.7.5 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:* | 0.7.6 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:* | 0.7.7 | Vulnerable | e107 |
| cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:* | 0.7.8 | Vulnerable | e107 |
- cpe:2.3:a:e107:e107:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.2:*:*:*:*:*:*:* Versions 0.7.2 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.3:*:*:*:*:*:*:* Versions 0.7.3 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.4:*:*:*:*:*:*:* Versions 0.7.4 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.5:*:*:*:*:*:*:* Versions 0.7.5 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.6:*:*:*:*:*:*:* Versions 0.7.6 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.7:*:*:*:*:*:*:* Versions 0.7.7 Vulnerable ·e107
- cpe:2.3:a:e107:e107:0.7.8:*:*:*:*:*:*:* Versions 0.7.8 Vulnerable ·e107
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-3429
- 2026-10-03 Alias added: GHSA-hqj6-4xqm-57x8
References
Exploit 1
More E107 vulnerabilities
- TI-2022-26359 e107 CMS v3.2.1 - Reflected XSS via Comment Flow CVSS 3.1CRITICAL 9.8
- TI-2022-26369 e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override CVSS 4.0HIGH 8.7
- TI-2022-26391 e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override CVSS 4.0HIGH 8.6
- TI-2022-26361 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE CVSS 4.0HIGH 8.6
- TI-2023-18122 Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute… CVSS 3.1MEDIUM 5.4
- TI-2025-10948 e107 CMS Avatar image.php path traversal CVSS 4.0MEDIUM 5.3
Sources
- CVE-2007-3429 · CVE Program
- CVE-2007-3429 · NVD
- FIRST EPSS
- GHSA-hqj6-4xqm-57x8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences