Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
e107 BBCode任意PHP代码执行漏洞
Vulnerability Description
e107是用php编写的内容管理系统。 e107的bbcode/php.bb并不对所有可能包含php bbcode标签的输入进行访问控制检查，远程攻击者可以执行任意PHP代码，例如利用contact.php的toEmail方法执行代码，与toHTML方法的调用相关。
CVSS Information
N/A
Vulnerability Type
N/A