e107 is prone to a remote PHP code-execution vulnerability. An attacker can exploit this issue to inject and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system other attacks are also possible. e107 version 0.7.20 and prior are affected.

• http://e107.org/
• http://www.php-security.org/2010/05/19/mops-2010-035-e107-bbcode-remote-php-code-execution-vulnerability/index.html
• http://www.securityfocus.com/bid/40252

---

Updated on 2015-03-25