CVE-2011-1513: e107

High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days.

Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remote attackers to inject arbitrary PHP code into e107_config.php via a crafted MySQL server name.

Affected products

• e107 e107: up to and including 0.7.24; version 0.7 only; version 0.7.0 only; version 0.7.1 only; version 0.7.2 only; version 0.7.3 only; …

Published 2011-11-04. Last modified 2026-06-16.