CVE
- Id
- 49425
- CVE No.
- CVE-2011-1513
- Status
- Candidate
- Description
- Static code injection vulnerability in install_.php in e107 CMS 0.7.24 and probably earlier versions, when the installation script is not removed, allows remote attackers to inject arbitrary PHP code into e107_config.php via a crafted MySQL server name.
- Phase
- Assigned (20110323)
- Votes
- None (candidate not yet proposed)
- Comments