https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:48:53.111865+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-67166 EUVD-2026-67166 2026-10-18T23:48:53.114385+00:00 EUVD-2026-67166 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14685 fkie_cve-2018-14685 2026-10-18T23:48:53.114415+00:00

The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a crafted index.php?s=Admin-Tpl-ADD-id request, related to Lib/Common/Admin/function.php.

 https://cve.radiocsirt.org/vuln/ghsa-jqw5-mcm2-2gp8 GHSA-jqw5-mcm2-2gp8 2026-10-18T23:48:53.114445+00:00

The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a crafted index.php?s=Admin-Tpl-ADD-id request, related to Lib/Common/Admin/function.php.

 https://cve.radiocsirt.org/vuln/gsd-2018-14685 gsd-2018-14685 2026-10-18T23:48:53.114462+00:00 gsd-2018-14685