e107inc vulnerabilities
9 published CVEs name e107inc among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-114407
e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
e107inc · e107
Medium5.1 - CVE-2026-55573
e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain
e107inc · e107
Critical9.8 - CVE-2026-55572
e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login username
e107inc · e107
Critical10.0 - CVE-2026-57859
e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()
e107inc · e107
High7.7 - CVE-2026-48997
e107: Command Injection via shell expansion in ImageMagick resize destination path
e107inc · e107
High7.1 - CVE-2026-46620
e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()
e107inc · e107
Medium6.5 - CVE-2026-43935
e107: Host Header Injection in e107 password reset enables phishing
e107inc · e107
High8.1 - CVE-2026-43934
e107: Broken Access Control in e107 comment edit allows cross-user comment modification
e107inc · e107
Medium6.5 - CVE-2026-43936
e107: Server-Side Request Forgery (SSRF) in the remote file fetcher
e107inc · e107
Medium4.3