https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T22:37:33.426534+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-25184 CVE-2018-25184 — Surreal ToDo 0.6.1.2 Local File Inclusion via index.php 2026-10-27T22:37:33.428104+00:00

Affected: Getsurreal Surreal ToDo

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files like configuration and initialization files.