https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:23:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-13550 cnvd-2018-13550 https://cve.radiocsirt.org/vuln/cnvd-2018-13550 https://cve.radiocsirt.org/vuln/euvd-2026-71128 EUVD-2026-71128 https://cve.radiocsirt.org/vuln/euvd-2026-71128 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000207 <p>MODX Revolution version &lt;=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.</p> <p>MODX Revolution version &lt;=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000207 https://cve.radiocsirt.org/vuln/ghsa-m899-6mh4-mpc5 <p><strong>Affected:</strong> Packagist: modx/revolution</p> <p>MODX Revolution version &lt;=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.</p> <p><strong>Affected:</strong> Packagist: modx/revolution</p> <p>MODX Revolution version &lt;=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.</p> https://cve.radiocsirt.org/vuln/ghsa-m899-6mh4-mpc5 https://cve.radiocsirt.org/vuln/gsd-2018-1000207 gsd-2018-1000207 https://cve.radiocsirt.org/vuln/gsd-2018-1000207