https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 08:01:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280656 EUVD-2026-280656 https://cve.radiocsirt.org/vuln/euvd-2026-280656 https://cve.radiocsirt.org/vuln/fkie_cve-2012-10052 <p>EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files directly into the web-accessible egallery/ directory. This results in full remote code execution under the web server context.</p> <p>EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files directly into the web-accessible egallery/ directory. This results in full remote code execution under the web server context.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-10052 https://cve.radiocsirt.org/vuln/ghsa-x2xc-mrmf-q7pv <p>EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files directly into the web-accessible egallery/ directory. This results in full remote code execution under the web server context.</p> <p>EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files directly into the web-accessible egallery/ directory. This results in full remote code execution under the web server context.</p> https://cve.radiocsirt.org/vuln/ghsa-x2xc-mrmf-q7pv