https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T08:01:15.298258+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2021-47937 fkie_cve-2021-47937 2026-09-28T08:01:16.541214+00:00

e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicious theme files. Attackers can upload a crafted theme package through the theme.php endpoint that deploys a web shell to the e107_themes directory, then execute system commands via the payload.php script.

 https://vulnerability.circl.lu/vuln/ghsa-2ggw-79xf-f33h GHSA-2ggw-79xf-f33h 2026-09-28T08:01:16.541314+00:00

e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicious theme files. Attackers can upload a crafted theme package through the theme.php endpoint that deploys a web shell to the e107_themes directory, then execute system commands via the payload.php script.