https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 01:32:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-11710 cnvd-2018-11710 https://cve.radiocsirt.org/vuln/cnvd-2018-11710 https://cve.radiocsirt.org/vuln/euvd-2026-64551 EUVD-2026-64551 https://cve.radiocsirt.org/vuln/euvd-2026-64551 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10235 <p>POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php &#39;index&#39; function because an attacker can control the value of $cache[&#39;setting&#39;][&#39;ucssocfg&#39;] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.</p> <p>POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php &#39;index&#39; function because an attacker can control the value of $cache[&#39;setting&#39;][&#39;ucssocfg&#39;] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10235 https://cve.radiocsirt.org/vuln/ghsa-qcv3-54gc-4367 <p>POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php &#39;index&#39; function because an attacker can control the value of $cache[&#39;setting&#39;][&#39;ucssocfg&#39;] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.</p> <p>POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php &#39;index&#39; function because an attacker can control the value of $cache[&#39;setting&#39;][&#39;ucssocfg&#39;] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.</p> https://cve.radiocsirt.org/vuln/ghsa-qcv3-54gc-4367 https://cve.radiocsirt.org/vuln/gsd-2018-10235 gsd-2018-10235 https://cve.radiocsirt.org/vuln/gsd-2018-10235