https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T17:13:11.936672+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-25162 CVE-2018-25162 — 2-Plan Team 1.0.4 Arbitrary File Upload via managefile.php 2026-10-19T17:13:11.953380+00:00

Affected: 2-Plan Plan Team

2-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to managefile.php. Attackers can upload PHP files through the userfile1 parameter with action=upload, which are stored in the files directory and executed by the web server for remote code execution.