CVE-2010-0996

Unrestricted file upload vulnerability in e107 before 0.7.20 allows remote authenticated users to execute arbitrary code by uploading a .php.filetypesphp file. NOTE: the vendor disputes the significance of this issue, noting that "an odd set of preferences and a missing file" are required.

• http://e107.org/comment.php?comment.news.864Patch, Vendor Advisory
• http://e107.org/svn_changelog.php?version=0.7.20
• http://secunia.com/advisories/39013Vendor Advisory
• http://secunia.com/secunia_research/2010-44/Vendor Advisory
• http://www.securityfocus.com/archive/1/510805/100/0/threaded
• http://www.securityfocus.com/bid/39540
• http://www.vupen.com/english/advisories/2010/0919Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57932
• http://e107.org/comment.php?comment.news.864Patch, Vendor Advisory
• http://e107.org/svn_changelog.php?version=0.7.20
• http://secunia.com/advisories/39013Vendor Advisory
• http://secunia.com/secunia_research/2010-44/Vendor Advisory
• http://www.securityfocus.com/archive/1/510805/100/0/threaded
• http://www.securityfocus.com/bid/39540
• http://www.vupen.com/english/advisories/2010/0919Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57932

Published

Apr 20, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0990Stack-based buffer overflow in Creative Software AutoUpdate …
• CVE-2010-0991Multiple heap-based buffer overflows in imlib2 1.4.3 allow c…
• CVE-2010-0992Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-0993Unrestricted file upload vulnerability in Pulse CMS Basic 1.…
• CVE-2010-0994Multiple buffer overflows in src/vl/vlDAT.cpp in Visualizati…
• CVE-2010-0995Stack-based buffer overflow in Internet Download Manager (ID…
• CVE-2010-0997Cross-site scripting (XSS) vulnerability in 107_plugins/cont…
• CVE-2010-0998Multiple stack-based buffer overflows in Free Download Manag…
• CVE-2010-0999Directory traversal vulnerability in Free Download Manager (…
• CVE-2010-1000Directory traversal vulnerability in KGet in KDE SC 4.0.0 th…
• CVE-2010-10001A vulnerability, which was classified as problematic, was fo…5.5
• CVE-2010-10002** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1