https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T16:56:12.629991+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-144917 EUVD-2026-144917 2026-10-14T16:56:12.701360+00:00 EUVD-2026-144917 https://cve.radiocsirt.org/vuln/fkie_cve-2006-6869 fkie_cve-2006-6869 2026-10-14T16:56:12.701399+00:00

Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang cookie to error.php, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.

 https://cve.radiocsirt.org/vuln/ghsa-w32g-xfp9-q52p GHSA-w32g-xfp9-q52p 2026-10-14T16:56:12.701438+00:00

Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang cookie to error.php, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.

 https://cve.radiocsirt.org/vuln/gsd-2006-6869 gsd-2006-6869 2026-10-14T16:56:12.701457+00:00 gsd-2006-6869