https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 22:38:23 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-06614 cnvd-2019-06614 https://cve.radiocsirt.org/vuln/cnvd-2019-06614 https://cve.radiocsirt.org/vuln/euvd-2026-183517 EUVD-2026-183517 https://cve.radiocsirt.org/vuln/euvd-2026-183517 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9611 <p>An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversal, with ../ in the dir parameter, to write arbitrary content (in the file_content parameter) into an arbitrary file (specified by the file_name parameter). This is related to the save function in TemplateController.java.</p> <p>An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversal, with ../ in the dir parameter, to write arbitrary content (in the file_content parameter) into an arbitrary file (specified by the file_name parameter). This is related to the save function in TemplateController.java.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9611 https://cve.radiocsirt.org/vuln/ghsa-5m56-c6gr-gc7v <p>An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversal, with ../ in the dir parameter, to write arbitrary content (in the file_content parameter) into an arbitrary file (specified by the file_name parameter). This is related to the save function in TemplateController.java.</p> <p>An issue was discovered in OFCMS before 1.1.3. It allows admin/cms/template/getTemplates.html?res_path=res directory traversal, with ../ in the dir parameter, to write arbitrary content (in the file_content parameter) into an arbitrary file (specified by the file_name parameter). This is related to the save function in TemplateController.java.</p> https://cve.radiocsirt.org/vuln/ghsa-5m56-c6gr-gc7v https://cve.radiocsirt.org/vuln/gsd-2019-9611 gsd-2019-9611 https://cve.radiocsirt.org/vuln/gsd-2019-9611