Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 07:55:09 +0000 cnvd-2019-46982 https://cve.radiocsirt.org/vuln/cnvd-2019-46982 cnvd-2019-46982 https://cve.radiocsirt.org/vuln/cnvd-2019-46982 EUVD-2026-59530 https://cve.radiocsirt.org/vuln/euvd-2026-59530 EUVD-2026-59530 https://cve.radiocsirt.org/vuln/euvd-2026-59530 fkie_cve-2019-19745 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19745 <p>Contao 4.0 through 4.8.5 allows PHP local file inclusion. A back end user with access to the form generator can upload arbitrary files and execute them on the server.</p> <p>Contao 4.0 through 4.8.5 allows PHP local file inclusion. A back end user with access to the form generator can upload arbitrary files and execute them on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19745 GHSA-wjx8-cgrm-hh8p — Unrestricted file uploads in Contao https://cve.radiocsirt.org/vuln/ghsa-wjx8-cgrm-hh8p <p><strong>Affected:</strong> Packagist: contao/core-bundle, Packagist: contao/contao</p> <p>### Impact</p> <p>A back end user with access to the form generator can upload arbitrary files and execute them on the server.</p> <p>### Patches</p> <p>Update to Contao 4.4.46 or 4.8.6.</p> <p>### Workarounds</p> <p>Configure your web server so it does not execute PHP files and other scripts in the Contao file upload directory.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/unrestricted-file-uploads</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> <p><strong>Affected:</strong> Packagist: contao/core-bundle, Packagist: contao/contao</p> <p>### Impact</p> <p>A back end user with access to the form generator can upload arbitrary files and execute them on the server.</p> <p>### Patches</p> <p>Update to Contao 4.4.46 or 4.8.6.</p> <p>### Workarounds</p> <p>Configure your web server so it does not execute PHP files and other scripts in the Contao file upload directory.</p> <p>### References</p> <p>https://contao.org/en/security-advisories/unrestricted-file-uploads</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, open an issue in [contao/contao](https://github.com/contao/contao/issues/new/choose).</p> https://cve.radiocsirt.org/vuln/ghsa-wjx8-cgrm-hh8p gsd-2019-19745 https://cve.radiocsirt.org/vuln/gsd-2019-19745 gsd-2019-19745 https://cve.radiocsirt.org/vuln/gsd-2019-19745