CVE-2004-2262: e107

High severity, CVSS 7.5. EPSS: 14.9% chance of exploitation in the next 30 days.

ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.

Affected products

• e107 e107: before 0.617 (fixed in 0.617)

Published 2004-12-31. Last modified 2026-06-16.