https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T09:06:57.196238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-141314 EUVD-2026-141314 2026-10-15T09:06:57.263191+00:00 EUVD-2026-141314 https://cve.radiocsirt.org/vuln/fkie_cve-2006-3042 fkie_cve-2006-3042 2026-10-15T09:06:57.263231+00:00

Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) go_info[isp][classes_root] parameter in (a) server.inc.php, and the (2) go_info[server][classes_root] parameter in (b) app.inc.php, (c) login.php, and (d) trylogin.php. NOTE: this issue has been disputed by the vendor, who states that the original researcher "reviewed the installation tarball that is not identical with the resulting system after installtion. The file, where the $go_info array is declared ... is created by the installer.

 https://cve.radiocsirt.org/vuln/ghsa-cq4h-jg73-mw34 GHSA-cq4h-jg73-mw34 2026-10-15T09:06:57.263267+00:00

** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) go_info[isp][classes_root] parameter in (a) server.inc.php, and the (2) go_info[server][classes_root] parameter in (b) app.inc.php, (c) login.php, and (d) trylogin.php. NOTE: this issue has been disputed by the vendor, who states that the original researcher "reviewed the installation tarball that is not identical with the resulting system after installtion. The file, where the $go_info array is declared ... is created by the installer."

 https://cve.radiocsirt.org/vuln/gsd-2006-3042 gsd-2006-3042 2026-10-15T09:06:57.263288+00:00 gsd-2006-3042