CVE-2010-0996

Summary of CVE-2010-0996 (e107) : Affected software is e107 prior to version 0.7.20. The issue is an unrestricted file upload vulnerability that can allow remote authenticated users to execute arbitrary PHP code by uploading a ".php.filetypesphp" file. The vendor disputes the severity, stating th...

Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability

====================================================================== Secunia Research 19/04/2010 - e107 Avatar/Photograph Image File Upload Vulnerability - ====================================================================== Table of Contents Affected...