VULNERABILITY INTELLIGENCE

CVE-2022-50916

CVSS score7.2 HIGH

EPSS probability0.95%

CISA KEVNot currently listed

Published2026-01-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

e107 CMS version 3.2.1 contains a file upload vulnerability that allows authenticated administrators to override server files through the Media Manager import functionality. Attackers can exploit the upload mechanism by manipulating the upload URL parameter to overwrite existing files like top.php in the web application directory.

Weakness classification

disclosure@vulncheck.com: CWE-434

Primary references

disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Third Party Advisory