https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:05:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-05083 cnvd-2015-05083 https://cve.radiocsirt.org/vuln/cnvd-2015-05083 https://cve.radiocsirt.org/vuln/euvd-2026-103361 EUVD-2026-103361 https://cve.radiocsirt.org/vuln/euvd-2026-103361 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8677 <p>The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.</p> <p>The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-8677 https://cve.radiocsirt.org/vuln/ghsa-r3rc-xgjr-hc9q <p>The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.</p> <p>The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.</p> https://cve.radiocsirt.org/vuln/ghsa-r3rc-xgjr-hc9q https://cve.radiocsirt.org/vuln/gsd-2014-8677 gsd-2014-8677 https://cve.radiocsirt.org/vuln/gsd-2014-8677