https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 01:32:24 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-419 certfr-2016-avi-419 https://cve.radiocsirt.org/vuln/certfr-2016-avi-419 https://cve.radiocsirt.org/vuln/cnvd-2016-11961 cnvd-2016-11961 https://cve.radiocsirt.org/vuln/cnvd-2016-11961 https://cve.radiocsirt.org/vuln/euvd-2026-88068 EUVD-2026-88068 https://cve.radiocsirt.org/vuln/euvd-2026-88068 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9836 <p>The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.</p> <p>The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9836 https://cve.radiocsirt.org/vuln/ghsa-43p3-cf56-rpqr <p>The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.</p> <p>The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.</p> https://cve.radiocsirt.org/vuln/ghsa-43p3-cf56-rpqr https://cve.radiocsirt.org/vuln/gsd-2016-9836 gsd-2016-9836 https://cve.radiocsirt.org/vuln/gsd-2016-9836