Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:39:49 +0000 cnvd-2015-03792 https://cve.radiocsirt.org/vuln/cnvd-2015-03792 cnvd-2015-03792 https://cve.radiocsirt.org/vuln/cnvd-2015-03792 EUVD-2026-103322 https://cve.radiocsirt.org/vuln/euvd-2026-103322 EUVD-2026-103322 https://cve.radiocsirt.org/vuln/euvd-2026-103322 fkie_cve-2014-8603 https://cve.radiocsirt.org/vuln/fkie_cve-2014-8603 <p>cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metacharacters in the (1) file name when creating a backup or vectors related to the (2) $_CONFIG[tarpath], (3) $exclude, (4) $_CONFIG[&#39;tarcompress&#39;], (5) $_CONFIG[&#39;filename&#39;], (6) $_CONFIG[&#39;exfile_tar&#39;], (7) $_CONFIG[sqldump], (8) $_CONFIG[&#39;mysql_host&#39;], (9) $_CONFIG[&#39;mysql_pass&#39;], (10) $_CONFIG[&#39;mysql_user&#39;], (11) $database_name, or (12) $sqlfile variable.</p> <p>cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metacharacters in the (1) file name when creating a backup or vectors related to the (2) $_CONFIG[tarpath], (3) $exclude, (4) $_CONFIG[&#39;tarcompress&#39;], (5) $_CONFIG[&#39;filename&#39;], (6) $_CONFIG[&#39;exfile_tar&#39;], (7) $_CONFIG[sqldump], (8) $_CONFIG[&#39;mysql_host&#39;], (9) $_CONFIG[&#39;mysql_pass&#39;], (10) $_CONFIG[&#39;mysql_user&#39;], (11) $database_name, or (12) $sqlfile variable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-8603 GHSA-p3pf-r6h4-6j4r https://cve.radiocsirt.org/vuln/ghsa-p3pf-r6h4-6j4r <p>cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metacharacters in the (1) file name when creating a backup or vectors related to the (2) $_CONFIG[tarpath], (3) $exclude, (4) $_CONFIG[&#39;tarcompress&#39;], (5) $_CONFIG[&#39;filename&#39;], (6) $_CONFIG[&#39;exfile_tar&#39;], (7) $_CONFIG[sqldump], (8) $_CONFIG[&#39;mysql_host&#39;], (9) $_CONFIG[&#39;mysql_pass&#39;], (10) $_CONFIG[&#39;mysql_user&#39;], (11) $database_name, or (12) $sqlfile variable.</p> <p>cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metacharacters in the (1) file name when creating a backup or vectors related to the (2) $_CONFIG[tarpath], (3) $exclude, (4) $_CONFIG[&#39;tarcompress&#39;], (5) $_CONFIG[&#39;filename&#39;], (6) $_CONFIG[&#39;exfile_tar&#39;], (7) $_CONFIG[sqldump], (8) $_CONFIG[&#39;mysql_host&#39;], (9) $_CONFIG[&#39;mysql_pass&#39;], (10) $_CONFIG[&#39;mysql_user&#39;], (11) $database_name, or (12) $sqlfile variable.</p> https://cve.radiocsirt.org/vuln/ghsa-p3pf-r6h4-6j4r gsd-2014-8603 https://cve.radiocsirt.org/vuln/gsd-2014-8603 gsd-2014-8603 https://cve.radiocsirt.org/vuln/gsd-2014-8603