https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 06:31:05 +0000 https://cve.radiocsirt.org/vuln/cve-2018-19520 <p>An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace &#39;e&#39; calls, allowing users to execute arbitrary code by leveraging access to admin template management.</p> <p>An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace &#39;e&#39; calls, allowing users to execute arbitrary code by leveraging access to admin template management.</p> https://cve.radiocsirt.org/vuln/cve-2018-19520