https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 23:16:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-08668 cnvd-2018-08668 https://cve.radiocsirt.org/vuln/cnvd-2018-08668 https://cve.radiocsirt.org/vuln/euvd-2026-179016 EUVD-2026-179016 https://cve.radiocsirt.org/vuln/euvd-2026-179016 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10085 <p>CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files.</p> <p>CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10085 https://cve.radiocsirt.org/vuln/ghsa-238m-m2p5-fw2g <p>CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files.</p> <p>CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files.</p> https://cve.radiocsirt.org/vuln/ghsa-238m-m2p5-fw2g https://cve.radiocsirt.org/vuln/gsd-2018-10085 gsd-2018-10085 https://cve.radiocsirt.org/vuln/gsd-2018-10085