https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:10:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280935 EUVD-2026-280935 https://cve.radiocsirt.org/vuln/euvd-2026-280935 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53952 <p>Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.</p> <p>Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-53952 https://cve.radiocsirt.org/vuln/ghsa-w6jr-fv5g-m8h5 <p>Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.</p> <p>Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-w6jr-fv5g-m8h5 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-53952 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dotclear</p> <p>Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dotclear</p> <p>Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed, enabling arbitrary code execution on the server.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-53952