CVE-2011-4920

## Vulnerability e107 versions 0.7.26 and earlier before 1.0.0 contain multiple cross-site scripting (XSS) vulnerabilities. The affected vectors include: the URL passed to e107_images/thumb.php and rate.php; the resend_name parameter in e107_admin/users.php; and the link BBCode in user signatures. These flaws allow injection of arbitrary web script or HTML.

Exploitation

An attacker can exploit the URL-based XSS by crafting a malicious link and tricking a victim into clicking it. The resend_name parameter XSS requires access to the admin panel (though no authentication is specified, it is likely an admin function). The signature XSS requires a user to have the ability to edit their signature and include malicious BBCode, which then executes when other users view the profile or posts containing the signature.

Impact

Successful exploitation allows an attacker to execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information. The impact is limited to the user's session and browser.

Mitigation

The vulnerabilities are fixed in e107 version 1.0.0 [1]. Users should upgrade to this version or later. No workarounds are documented in the available references.