https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T06:37:46.033377+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-138344 EUVD-2026-138344 2026-10-24T06:37:46.036255+00:00 EUVD-2026-138344 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6652 fkie_cve-2007-6652 2026-10-24T06:37:46.036295+00:00

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).

 https://cve.radiocsirt.org/vuln/ghsa-cf9h-mc58-gqvq GHSA-cf9h-mc58-gqvq 2026-10-24T06:37:46.036337+00:00

cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).

 https://cve.radiocsirt.org/vuln/gsd-2007-6652 gsd-2007-6652 2026-10-24T06:37:46.036356+00:00 gsd-2007-6652