Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 11:41:05 +0000 EUVD-2026-211038 https://cve.radiocsirt.org/vuln/euvd-2026-211038 EUVD-2026-211038 https://cve.radiocsirt.org/vuln/euvd-2026-211038 fkie_cve-2007-4290 https://cve.radiocsirt.org/vuln/fkie_cve-2007-4290 <p>Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php, (7) logout.php, or (8) settings.php in admin/. NOTE: a third party disputes this vulnerability, noting that these scripts defend against direct requests</p> <p>Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php, (7) logout.php, or (8) settings.php in admin/. NOTE: a third party disputes this vulnerability, noting that these scripts defend against direct requests</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-4290 GHSA-5wgh-3393-wp4p https://cve.radiocsirt.org/vuln/ghsa-5wgh-3393-wp4p <p>** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php, (7) logout.php, or (8) settings.php in admin/. NOTE: a third party disputes this vulnerability, noting that these scripts defend against direct requests.</p> <p>** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the script_root parameter to (1) delete.php, (2) edit.php, or (3) inc/common.inc.php; or (4) database.php, (5) entries.php, (6) index.php, (7) logout.php, or (8) settings.php in admin/. NOTE: a third party disputes this vulnerability, noting that these scripts defend against direct requests.</p> https://cve.radiocsirt.org/vuln/ghsa-5wgh-3393-wp4p gsd-2007-4290 https://cve.radiocsirt.org/vuln/gsd-2007-4290 gsd-2007-4290 https://cve.radiocsirt.org/vuln/gsd-2007-4290