Vulnerability in E107

CVE-2005-2559

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.

EPSS: 0.023 (81.2th percentile) — read the EPSS interpretation.

Affected products

  • E107
  • N/a — versions n/a

References