Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 02:24:43 +0000 cnvd-2018-08917 https://cve.radiocsirt.org/vuln/cnvd-2018-08917 cnvd-2018-08917 https://cve.radiocsirt.org/vuln/cnvd-2018-08917 EUVD-2026-172488 https://cve.radiocsirt.org/vuln/euvd-2026-172488 EUVD-2026-172488 https://cve.radiocsirt.org/vuln/euvd-2026-172488 fkie_cve-2018-10519 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10519 <p>CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this-&gt;_loginkey] to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because of an incorrect fix for CVE-2018-10084.</p> <p>CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this-&gt;_loginkey] to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because of an incorrect fix for CVE-2018-10084.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10519 GHSA-fv27-jv5h-jf4q https://cve.radiocsirt.org/vuln/ghsa-fv27-jv5h-jf4q <p>CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this-&gt;_loginkey] to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because of an incorrect fix for CVE-2018-10084.</p> <p>CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this-&gt;_loginkey] to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because of an incorrect fix for CVE-2018-10084.</p> https://cve.radiocsirt.org/vuln/ghsa-fv27-jv5h-jf4q gsd-2018-10519 https://cve.radiocsirt.org/vuln/gsd-2018-10519 gsd-2018-10519 https://cve.radiocsirt.org/vuln/gsd-2018-10519