CVE-2011-1513
N/A
Published: November 4, 2011 at 09:00 PM UTC
Updated: June 16, 2026 at 11:29 PM UTC
1 product affected across 1 vendorE107
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remote attackers to inject arbitrary PHP code into e107_config.php via a crafted MySQL server name.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 0.7.240.5450.547 beta0.548 beta0.549 beta0.551 beta0.552 beta0.553 beta0.5540.554 beta0.555 beta0.6000.6010.6020.6030.6040.6050.6060.6070.6080.6090.6100.6110.6120.6130.6140.6150.615a0.6160.6170.61710.61720.61730.61740.61750.70.7.00.7.10.7.100.7.110.7.120.7.130.7.140.7.150.7.160.7.170.7.180.7.190.7.20.7.200.7.210.7.220.7.30.7.40.7.50.7.60.7.70.7.80.7.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
x_refsource_CONFIRMPatch
Source: [email protected]
http://e107.svn.sourceforge.net/viewvc/e107/trunk/e107_0.8/install_.php?r1=11931&r2=12376&pathrev=12376x_refsource_MISCExploitPatch
Source: [email protected]
http://www.coresecurity.com/content/e107-cms-script-command-injectionVDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/70921Quick Info
StatusMODIFIED
CWE
CWE-78
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card