CVE-2011-1513

CVE-2011-1513 is a static code injection vulnerability affecting e107 CMS version 0.7.24 and potentially earlier versions. It allows unauthenticated remote attackers to inject arbitrary PHP code into the e107_config.php file by manipulating the MySQL server name during an unremoved installation process. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog and lacking Metasploit or Nuclei modules, an ExploitDB entry for remote command execution exists, though there is no evidence of active exploitation or significant community discussion.