https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:31:35.290400+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2008-6592 CVE-2008-6592 2026-10-03T19:31:35.305945+00:00

thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy "no database" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte).