NetSight
IP …
high7.5Public exploit code

CVE-2011-1513

Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remot…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remote attackers to inject arbitrary PHP code into e107_config.php via a crafted MySQL server name.

Affected products

VendorProductAffected versions
E107E107
through 0.7.24
Versions 0.7, 0.7.0, 0.7.1, 0.7.2, 0.7.3

Weakness classification

CWE-78

References