CVE-2007-3429: e107

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph upload is enabled, allows remote attackers to upload and execute arbitrary PHP code via a filename with a double extension such as .php.jpg.

Affected products

• e107 e107: version 0.7 only; version 0.7.1 only; version 0.7.2 only; version 0.7.3 only; version 0.7.4 only; version 0.7.5 only; …

Published 2007-06-27. Last modified 2026-06-16.