https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 03:46:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-16478 cnvd-2019-16478 https://cve.radiocsirt.org/vuln/cnvd-2019-16478 https://cve.radiocsirt.org/vuln/euvd-2026-88541 EUVD-2026-88541 https://cve.radiocsirt.org/vuln/euvd-2026-88541 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10751 <p>osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&amp;action=ajax_upload.</p> <p>osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&amp;action=ajax_upload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10751 https://cve.radiocsirt.org/vuln/ghsa-rx8m-6wvh-3j5h <p>osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&amp;action=ajax_upload.</p> <p>osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&amp;action=ajax_upload.</p> https://cve.radiocsirt.org/vuln/ghsa-rx8m-6wvh-3j5h https://cve.radiocsirt.org/vuln/gsd-2016-10751 gsd-2016-10751 https://cve.radiocsirt.org/vuln/gsd-2016-10751