What’s Vulnerable › Vulnerabilities
CVE-2013-7305
- Severity: medium (CVSS 4.3 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2014-01-22 · updated 2026-06-17
- Weakness: CWE-255
Description
fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user.
Affected products
- e107 CMS: through 1.0.4; 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5 (+22)
References
Get alerted when CVE-2013-7305 or the next vulnerability affects your stack