https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 14:22:28 +0000 https://cve.radiocsirt.org/vuln/cve-2019-11021 <p>admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: &#34;While inadvertently allowing a PHP file to be uploaded via Media Manager was an oversight, it still requires an admin permission. We think it&#39;s pretty rare for an administrator to exploit a bug on his/her own site to own his/her own site.</p> <p>admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: &#34;While inadvertently allowing a PHP file to be uploaded via Media Manager was an oversight, it still requires an admin permission. We think it&#39;s pretty rare for an administrator to exploit a bug on his/her own site to own his/her own site.</p> https://cve.radiocsirt.org/vuln/cve-2019-11021