CVE-2022-50939

e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to override arbitrary server files through path traversal. The vulnerability exists in the Media Manager's remote URL upload functionality (image.php) where the upload_caption parameter is not properly sanitized. An attacker with administrative privileges can use directory traversal sequences (../../../) in the upload_caption field to overwrite critical system files outside the intended upload directory. This can lead to complete compromise of the web application by overwriting configuration files, executable scripts, or other critical system components. The vulnerability was discovered by Hubert Wojciechowski and affects the image.php component in the admin interface.

• CWE-22
• CWE-434
• CWE-22

• https://e107.org/Product
• https://e107.org/downloadProduct
• https://www.exploit-db.com/exploits/50910Exploit, Third Party Advisory, VDB Entry
• https://www.vulncheck.com/advisories/e-cms-upload-restriction-bypass-with-path-traversal-file-overrideThird Party Advisory
• https://www.exploit-db.com/exploits/50910Exploit, Third Party Advisory, VDB Entry

Published

Jan 13, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-50933Cain & Abel 4.9.56 contains an unquoted service path vulnera…8.5
• CVE-2022-50934Rejected reason: This candidate was withdrawn by its CNA. Fu…
• CVE-2022-50935Flame II HSPA USB Modem contains an unquoted service path vu…9.8
• CVE-2022-50936WBCE CMS version 1.5.2 contains an authenticated remote code…8.8
• CVE-2022-50937Ametys CMS v4.4.1 contains a persistent cross-site scripting…6.1
• CVE-2022-50938CONTPAQi AdminPAQ 14.0.0 contains an unquoted service path v…8.5
• CVE-2022-50940Knap Advanced PHP Login 3.1.3 contains a persistent cross-si…6.4
• CVE-2022-50941BootCommerce 3.2.1 contains persistent input validation vuln…6.4
• CVE-2022-50942Incinga Web 2.8.2 contains a client-side cross-site scriptin…5.4
• CVE-2022-50943Moodle LMS 4.0 contains a cross-site scripting vulnerability…6.1
• CVE-2022-50944Aero CMS 0.0.1 contains a PHP code injection vulnerability t…8.8
• CVE-2022-50945WordPress 3dady Real-Time Web Stats plugin 1.0 contains a st…6.4