https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:14:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-107973 EUVD-2026-107973 https://cve.radiocsirt.org/vuln/euvd-2026-107973 https://cve.radiocsirt.org/vuln/fkie_cve-2013-5350 <p>The &#34;Remember me&#34; feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.</p> <p>The &#34;Remember me&#34; feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-5350 https://cve.radiocsirt.org/vuln/ghsa-c26j-j6q7-r2mc <p>The &#34;Remember me&#34; feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.</p> <p>The &#34;Remember me&#34; feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.</p> https://cve.radiocsirt.org/vuln/ghsa-c26j-j6q7-r2mc https://cve.radiocsirt.org/vuln/gsd-2013-5350 gsd-2013-5350 https://cve.radiocsirt.org/vuln/gsd-2013-5350 https://cve.radiocsirt.org/vuln/jvndb-2014-000009 <p>OpenPNE contains an issue in processing Cookie headers, which may result in a PHP Object Injection vulnerability. Egidio Romano of Secunia reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>OpenPNE contains an issue in processing Cookie headers, which may result in a PHP Object Injection vulnerability. Egidio Romano of Secunia reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2014-000009