https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:36:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-12755 cnvd-2022-12755 https://cve.radiocsirt.org/vuln/cnvd-2022-12755 https://cve.radiocsirt.org/vuln/euvd-2026-33238 EUVD-2026-33238 https://cve.radiocsirt.org/vuln/euvd-2026-33238 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45268 <p>A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cookie of a high-privileged authenticated user who is entitled to install arbitrary add-ons</p> <p>A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cookie of a high-privileged authenticated user who is entitled to install arbitrary add-ons</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-45268 https://cve.radiocsirt.org/vuln/ghsa-cxfw-78g3-3grg <p>A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file.</p> <p>A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file.</p> https://cve.radiocsirt.org/vuln/ghsa-cxfw-78g3-3grg https://cve.radiocsirt.org/vuln/gsd-2021-45268 gsd-2021-45268 https://cve.radiocsirt.org/vuln/gsd-2021-45268