https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:37:30.319419+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201765 EUVD-2026-201765 2026-10-07T22:37:30.322107+00:00 EUVD-2026-201765 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9042 fkie_cve-2019-9042 2026-10-07T22:37:30.322139+00:00

An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php. This can only occur if the administrator neglects to set FileExtensionFilter and there are untrusted user accounts. NOTE: The maintainer states that this is not a vulnerability but a feature used in conjunction with External Modules

 https://cve.radiocsirt.org/vuln/ghsa-fcp7-hqfr-j3f6 GHSA-fcp7-hqfr-j3f6 2026-10-07T22:37:30.322171+00:00

** DISPUTED ** An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php. This can only occur if the administrator neglects to set FileExtensionFilter and there are untrusted user accounts. NOTE: The maintainer states that this is not a vulnerability but a feature used in conjunction with External Modules.

 https://cve.radiocsirt.org/vuln/gsd-2019-9042 gsd-2019-9042 2026-10-07T22:37:30.322189+00:00 gsd-2019-9042