https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T01:10:01.752423+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-08085 cnvd-2017-08085 2026-10-28T01:10:01.755888+00:00 cnvd-2017-08085 https://cve.radiocsirt.org/vuln/euvd-2026-73719 EUVD-2026-73719 2026-10-28T01:10:01.755917+00:00 EUVD-2026-73719 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5965 fkie_cve-2017-5965 2026-10-28T01:10:01.755930+00:00

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload this archive and extract its contents, and visiting a URI under sitecore/ to execute the .asp file.

 https://cve.radiocsirt.org/vuln/ghsa-889m-9374-3cr2 GHSA-889m-9374-3cr2 2026-10-28T01:10:01.755957+00:00

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload this archive and extract its contents, and visiting a URI under sitecore/ to execute the .asp file.

 https://cve.radiocsirt.org/vuln/gsd-2017-5965 gsd-2017-5965 2026-10-28T01:10:01.755973+00:00 gsd-2017-5965