Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
e107 signup.php 未限制文件上传漏洞
Vulnerability Description
e107的signup.php中存在未限制文件上传漏洞。当照片上传被启用时,远程攻击者可以借助一个带有双扩展名的文件名,比如.php.jpg,上传和执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A