https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T01:32:24.683566+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2016-avi-419 certfr-2016-avi-419 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Joomla!</span>. Elles permettent à un attaquant… 2026-10-28T01:32:24.687215+00:00 certfr-2016-avi-419 https://cve.radiocsirt.org/vuln/cnvd-2016-11961 cnvd-2016-11961 2026-10-28T01:32:24.687254+00:00 cnvd-2016-11961 https://cve.radiocsirt.org/vuln/euvd-2026-88068 EUVD-2026-88068 2026-10-28T01:32:24.687270+00:00 EUVD-2026-88068 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9836 fkie_cve-2016-9836 2026-10-28T01:32:24.687283+00:00

The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.

 https://cve.radiocsirt.org/vuln/ghsa-43p3-cf56-rpqr GHSA-43p3-cf56-rpqr 2026-10-28T01:32:24.687310+00:00

The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.

 https://cve.radiocsirt.org/vuln/gsd-2016-9836 gsd-2016-9836 2026-10-28T01:32:24.687327+00:00 gsd-2016-9836