https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T05:38:22.244162+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-37436 cnvd-2017-37436 2026-10-18T05:38:22.296831+00:00 cnvd-2017-37436 https://cve.radiocsirt.org/vuln/euvd-2026-77824 EUVD-2026-77824 2026-10-18T05:38:22.296865+00:00 EUVD-2026-77824 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14077 fkie_cve-2017-14077 2026-10-18T05:38:22.296879+00:00

HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php.

 https://cve.radiocsirt.org/vuln/ghsa-q6v4-xjp2-8ggv GHSA-q6v4-xjp2-8ggv — Securimage HTML Injection 2026-10-18T05:38:22.296908+00:00

Affected: Packagist: dapphp/securimage

HTML Injection in Securimage prior to 3.6.6 allows remote attackers to inject arbitrary HTML into an e-mail message body via the `$_SERVER['HTTP_USER_AGENT']` parameter to `example_form.ajax.php` or `example_form.php`.

 https://cve.radiocsirt.org/vuln/gsd-2017-14077 gsd-2017-14077 2026-10-18T05:38:22.296932+00:00 gsd-2017-14077