e107 CMS Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in e107 CMS version 2.3.0. This vulnerability allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicious theme files. Exploitation involves uploading a crafted theme package through the theme.php endpoint, which deploys a web shell in the e107_themes directory. The uploaded web shell can then be used to execute system commands via a specified script.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where e107 CMS is hosted.

Reproduction

To reproduce this vulnerability, an authenticated user with theme installation permissions must upload a malicious theme package through the theme.php endpoint. The uploaded package should contain a web shell that can be accessed via the payload.php script, allowing for the execution of arbitrary system commands.

Remediation

Users are advised to upgrade to e107 CMS version 2.3.4, which addresses this vulnerability.