https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:11:18.726546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04390 bdu:2020-04390 2026-10-10T11:11:18.805987+00:00 bdu:2020-04390 https://cve.radiocsirt.org/vuln/cnvd-2020-21086 cnvd-2020-21086 2026-10-10T11:11:18.806026+00:00 cnvd-2020-21086 https://cve.radiocsirt.org/vuln/euvd-2026-39878 EUVD-2026-39878 2026-10-10T11:11:18.806041+00:00 EUVD-2026-39878 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10567 fkie_cve-2020-10567 2026-10-10T11:11:18.806053+00:00

An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)

 https://cve.radiocsirt.org/vuln/ghsa-r65x-vmq7-cgg6 GHSA-r65x-vmq7-cgg6 2026-10-10T11:11:18.806084+00:00

An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)

 https://cve.radiocsirt.org/vuln/gsd-2020-10567 gsd-2020-10567 2026-10-10T11:11:18.806101+00:00 gsd-2020-10567