https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:16:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-100638 EUVD-2026-100638 https://cve.radiocsirt.org/vuln/euvd-2026-100638 https://cve.radiocsirt.org/vuln/fkie_cve-2014-5298 <p>FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted file upload attacks by uploading a file with an executable extension that contains uppercase letters, as demonstrated using a PHP program.</p> <p>FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted file upload attacks by uploading a file with an executable extension that contains uppercase letters, as demonstrated using a PHP program.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-5298 https://cve.radiocsirt.org/vuln/ghsa-8jfm-3q68-9546 <p>FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted file upload attacks by uploading a file with an executable extension that contains uppercase letters, as demonstrated using a PHP program.</p> <p>FileUploadsFilter.php in X2Engine 4.1.7 and earlier, when running on case-insensitive file systems, allows remote attackers to bypass the upload blacklist and conduct unrestricted file upload attacks by uploading a file with an executable extension that contains uppercase letters, as demonstrated using a PHP program.</p> https://cve.radiocsirt.org/vuln/ghsa-8jfm-3q68-9546 https://cve.radiocsirt.org/vuln/gsd-2014-5298 gsd-2014-5298 https://cve.radiocsirt.org/vuln/gsd-2014-5298