https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:13:32.689175+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11710 cnvd-2018-11710 2026-10-18T02:13:32.766860+00:00 cnvd-2018-11710 https://cve.radiocsirt.org/vuln/euvd-2026-64551 EUVD-2026-64551 2026-10-18T02:13:32.766905+00:00 EUVD-2026-64551 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10235 fkie_cve-2018-10235 2026-10-18T02:13:32.766920+00:00

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache['setting']['ucssocfg'] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.

 https://cve.radiocsirt.org/vuln/ghsa-qcv3-54gc-4367 GHSA-qcv3-54gc-4367 2026-10-18T02:13:32.766952+00:00

POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache['setting']['ucssocfg'] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.

 https://cve.radiocsirt.org/vuln/gsd-2018-10235 gsd-2018-10235 2026-10-18T02:13:32.766969+00:00 gsd-2018-10235