https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:22:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-30730 cnvd-2017-30730 https://cve.radiocsirt.org/vuln/cnvd-2017-30730 https://cve.radiocsirt.org/vuln/euvd-2026-103943 EUVD-2026-103943 https://cve.radiocsirt.org/vuln/euvd-2026-103943 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9619 <p>Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.</p> <p>Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9619 https://cve.radiocsirt.org/vuln/ghsa-5872-pq3f-qqmv <p>Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.</p> <p>Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to execute arbitrary PHP code by uploading a file with a double extension, then accessing it via a direct request to the file in webadmin/deny/images/, as demonstrated by secuid0.php.gif.</p> https://cve.radiocsirt.org/vuln/ghsa-5872-pq3f-qqmv https://cve.radiocsirt.org/vuln/gsd-2014-9619 gsd-2014-9619 https://cve.radiocsirt.org/vuln/gsd-2014-9619