https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T14:28:35.824293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-08907 cnvd-2018-08907 2026-10-21T14:28:35.896767+00:00 cnvd-2018-08907 https://cve.radiocsirt.org/vuln/euvd-2026-64184 EUVD-2026-64184 2026-10-21T14:28:35.896827+00:00 EUVD-2026-64184 https://cve.radiocsirt.org/vuln/fkie_cve-2018-9153 fkie_cve-2018-9153 2026-10-21T14:28:35.896855+00:00

The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE-2018-8893. The component must be accessed directly by an administrator, or through CSRF.

 https://cve.radiocsirt.org/vuln/ghsa-g95r-39h2-qxq6 GHSA-g95r-39h2-qxq6 2026-10-21T14:28:35.896905+00:00

The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE-2018-8893. The component must be accessed directly by an administrator, or through CSRF.

 https://cve.radiocsirt.org/vuln/gsd-2018-9153 gsd-2018-9153 2026-10-21T14:28:35.896934+00:00 gsd-2018-9153