CyberRota Analysis
AI-GeneratedThe e107 content management system prior to version 2.3.8 is vulnerable to a code execution flaw in the e_array deserialization handler, allowing attackers with out-of-band database write access to execute arbitrary PHP code. This vulnerability arises from insufficient validation in the unserialize function, which can lead to automatic PHP execution when user preferences are loaded. Organizations using e107 should prioritize this issue to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the user_prefs column. The e_array::unserialize() function in e107_handlers/core_functions.php performs only a prefix check for the string 'array' before passing the stored value to eval(), causing automatic PHP execution whenever the affected user's preferences are materialized through e_user_pref::load().