https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:35:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-12913 cnvd-2019-12913 https://cve.radiocsirt.org/vuln/cnvd-2019-12913 https://cve.radiocsirt.org/vuln/euvd-2026-54007 EUVD-2026-54007 https://cve.radiocsirt.org/vuln/euvd-2026-54007 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10874 <p>Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.</p> <p>Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10874 https://cve.radiocsirt.org/vuln/ghsa-3g6c-88pf-m46f <p><strong>Affected:</strong> Packagist: bolt/bolt</p> <p>Cross Site Request Forgery (CSRF) in the `bolt/upload` File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the `file/edit/config/config.yml` configuration file.</p> <p><strong>Affected:</strong> Packagist: bolt/bolt</p> <p>Cross Site Request Forgery (CSRF) in the `bolt/upload` File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the `file/edit/config/config.yml` configuration file.</p> https://cve.radiocsirt.org/vuln/ghsa-3g6c-88pf-m46f https://cve.radiocsirt.org/vuln/gsd-2019-10874 gsd-2019-10874 https://cve.radiocsirt.org/vuln/gsd-2019-10874