https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T08:16:56.006903+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-26801 cnvd-2019-26801 2026-10-23T08:16:56.073199+00:00 cnvd-2019-26801 https://cve.radiocsirt.org/vuln/euvd-2026-60556 EUVD-2026-60556 2026-10-23T08:16:56.073236+00:00 EUVD-2026-60556 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1010062 fkie_cve-2019-1010062 2026-10-23T08:16:56.073250+00:00

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.

 https://cve.radiocsirt.org/vuln/ghsa-xgfr-gr68-98j5 GHSA-xgfr-gr68-98j5 2026-10-23T08:16:56.073280+00:00

PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.

 https://cve.radiocsirt.org/vuln/gsd-2019-1010062 gsd-2019-1010062 2026-10-23T08:16:56.073297+00:00 gsd-2019-1010062