← Database

CVE-2004-2262

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.

Affected Platforms

E107 E107

Weakness Type

CWE-434

References