CVE-2004-2262

CVE-2004-2262 describes an unauthenticated remote code execution in the e107 CMS, via the ImageManager “images.php” upload parameter. The root cause is improper validation of uploaded file types, allowing a PHP file to be uploaded and executed on the server. Affected software: e107 ImageManager i...