CVE-2010-2099 | BDVDB-2026-41911 Detail

Description#

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-05-27Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.