CVE-2004-2262
NoneCVSS
—
EPSS
14.9%
Published
Dec 31, 2004
CISA due date
—
The record
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-56414 A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow… CWE-434
- CVE-2026-33560 The DMP-5000 file service exposes authenticated arbitrary file upload functionality. CWE-434
- CVE-2026-57658 Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions. CWE-434
- CVE-2026-56059 Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. CWE-434
- CVE-2026-56058 Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions. CWE-434
- CVE-2026-56027 Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions. CWE-434
- CVE-2026-57700 Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows… CWE-434
- CVE-2026-48945 The K2 article gallery upload path accepts a zip/tar archive, extracts it under… CWE-434