https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 21:31:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-54796 EUVD-2026-54796 https://cve.radiocsirt.org/vuln/euvd-2026-54796 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12099 <p>In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload.</p> <p>In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12099 https://cve.radiocsirt.org/vuln/ghsa-7jx6-99j2-vhgc <p>In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload.</p> <p>In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload.</p> https://cve.radiocsirt.org/vuln/ghsa-7jx6-99j2-vhgc https://cve.radiocsirt.org/vuln/gsd-2019-12099 gsd-2019-12099 https://cve.radiocsirt.org/vuln/gsd-2019-12099