https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T18:04:41.323750+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-138673 EUVD-2026-138673 2026-10-20T18:04:41.326579+00:00 EUVD-2026-138673 https://cve.radiocsirt.org/vuln/fkie_cve-2006-0244 fkie_cve-2006-0244 2026-10-20T18:04:41.326612+00:00

Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root

 https://cve.radiocsirt.org/vuln/ghsa-cfr7-m7j6-q7hh GHSA-cfr7-m7j6-q7hh 2026-10-20T18:04:41.326644+00:00

** DISPUTED ** Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root.

 https://cve.radiocsirt.org/vuln/gsd-2006-0244 gsd-2006-0244 2026-10-20T18:04:41.326663+00:00 gsd-2006-0244