https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:48:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00154 bdu:2018-00154 https://cve.radiocsirt.org/vuln/bdu:2018-00154 https://cve.radiocsirt.org/vuln/cnvd-2017-32843 cnvd-2017-32843 https://cve.radiocsirt.org/vuln/cnvd-2017-32843 https://cve.radiocsirt.org/vuln/euvd-2026-78671 EUVD-2026-78671 https://cve.radiocsirt.org/vuln/euvd-2026-78671 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15580 <p>osTicket 1.10.1 provides a functionality to upload &#39;html&#39; files with associated formats. However, it does not properly validate the uploaded file&#39;s contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.</p> <p>osTicket 1.10.1 provides a functionality to upload &#39;html&#39; files with associated formats. However, it does not properly validate the uploaded file&#39;s contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15580 https://cve.radiocsirt.org/vuln/ghsa-3grx-cccr-q3vw <p>osTicket 1.10.1 provides a functionality to upload &#39;html&#39; files with associated formats. However, it does not properly validate the uploaded file&#39;s contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.</p> <p>osTicket 1.10.1 provides a functionality to upload &#39;html&#39; files with associated formats. However, it does not properly validate the uploaded file&#39;s contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content.</p> https://cve.radiocsirt.org/vuln/ghsa-3grx-cccr-q3vw https://cve.radiocsirt.org/vuln/gsd-2017-15580 gsd-2017-15580 https://cve.radiocsirt.org/vuln/gsd-2017-15580