https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:36:34.213274+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-08876 cnvd-2016-08876 2026-10-03T03:36:34.217555+00:00 cnvd-2016-08876 https://cve.radiocsirt.org/vuln/euvd-2026-86932 EUVD-2026-86932 2026-10-03T03:36:34.217598+00:00 EUVD-2026-86932 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7903 fkie_cve-2016-7903 2026-10-03T03:36:34.217623+00:00

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.

 https://cve.radiocsirt.org/vuln/ghsa-m62w-37gh-m9j3 GHSA-m62w-37gh-m9j3 2026-10-03T03:36:34.217663+00:00

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.

 https://cve.radiocsirt.org/vuln/gsd-2016-7903 gsd-2016-7903 2026-10-03T03:36:34.217688+00:00 gsd-2016-7903 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7903 UBUNTU-CVE-2016-7903 2026-10-03T03:36:34.217716+00:00

Affected: Ubuntu:16.04:LTS: dotclear

Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.