CVE-2005-1949: e107

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.

Affected products

• e107 e107: any version

Published 2005-06-16. Last modified 2026-06-16.