https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T14:40:57.743858+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-10173 cnvd-2018-10173 2026-10-12T14:40:57.829791+00:00 cnvd-2018-10173 https://cve.radiocsirt.org/vuln/euvd-2026-64606 EUVD-2026-64606 2026-10-12T14:40:57.829833+00:00 EUVD-2026-64606 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10375 fkie_cve-2018-10375 2026-10-12T14:40:57.829854+00:00

A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized by attackers to upload and execute arbitrary PHP code via the /dede/archives_do.php?dopost=uploadLitpic litpic parameter when "Content-Type: image/jpeg" is sent, but the filename ends in .php and contains PHP code.

 https://cve.radiocsirt.org/vuln/ghsa-xhxq-7q2v-grf4 GHSA-xhxq-7q2v-grf4 2026-10-12T14:40:57.829900+00:00

A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized by attackers to upload and execute arbitrary PHP code via the /dede/archives_do.php?dopost=uploadLitpic litpic parameter when "Content-Type: image/jpeg" is sent, but the filename ends in .php and contains PHP code.

 https://cve.radiocsirt.org/vuln/gsd-2018-10375 gsd-2018-10375 2026-10-12T14:40:57.829931+00:00 gsd-2018-10375