CVE-2025-61505 PoC — e107 安全漏洞

Source

https://github.com/pescada-dev/CVE-2025-61505

Associated Vulnerability

Title:e107 安全漏洞 (CVE-2025-61505)
Description:e107是E107团队的一套开源、免费且基于PHP和MySQL的内容管理系统（CMS）。该系统支持多种插件和外观主题，可作为个人博客、讨论社区、档案资料库等。 e107 2.3.3及之前版本存在安全漏洞，该漏洞源于install.php脚本对previous_steps POST参数进行不安全的反序列化操作，可能导致远程代码执行或任意文件操作。

Description

Insecure Deserialization in e107 CMS install.php

File Snapshot


 None

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!