https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:01:05.235303+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255529 EUVD-2026-255529 2026-10-07T11:01:05.237906+00:00 EUVD-2026-255529 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60500 fkie_cve-2025-60500 2026-10-07T11:01:05.237958+00:00

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option. This logic flaw permits uploading of arbitrary PHP files, which are stored in a web-accessible directory.

 https://cve.radiocsirt.org/vuln/ghsa-rh3g-ww52-5mx2 GHSA-rh3g-ww52-5mx2 2026-10-07T11:01:05.238015+00:00

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option. This logic flaw permits uploading of arbitrary PHP files, which are stored in a web-accessible directory.