https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:34:55.150775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280964 EUVD-2026-280964 2026-10-06T17:34:55.219877+00:00 EUVD-2026-280964 https://cve.radiocsirt.org/vuln/fkie_cve-2024-58284 fkie_cve-2024-58284 2026-10-06T17:34:55.219916+00:00

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands through a GET parameter.

 https://cve.radiocsirt.org/vuln/ghsa-jg32-m8mr-6xvg GHSA-jg32-m8mr-6xvg 2026-10-06T17:34:55.219949+00:00

PopojiCMS 2.0.1 contains an authenticated remote command execution vulnerability that allows administrative users to inject malicious PHP code through the metadata settings endpoint. Attackers can log in and modify the meta content to create a web shell that executes arbitrary system commands through a GET parameter.