Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 23:21:03 +0000 cnvd-2018-16857 https://cve.radiocsirt.org/vuln/cnvd-2018-16857 cnvd-2018-16857 https://cve.radiocsirt.org/vuln/cnvd-2018-16857 EUVD-2026-66149 https://cve.radiocsirt.org/vuln/euvd-2026-66149 EUVD-2026-66149 https://cve.radiocsirt.org/vuln/euvd-2026-66149 fkie_cve-2018-12940 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12940 <p>Unrestricted file upload vulnerability in &#34;op/op.UploadChunks.php&#34; in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the &#34;qqfile&#34; parameter. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system commands to the web root of the application.</p> <p>Unrestricted file upload vulnerability in &#34;op/op.UploadChunks.php&#34; in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the &#34;qqfile&#34; parameter. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system commands to the web root of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12940 GHSA-8gcf-w7r4-3qhx https://cve.radiocsirt.org/vuln/ghsa-8gcf-w7r4-3qhx <p>Unrestricted file upload vulnerability in &#34;op/op.UploadChunks.php&#34; in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the &#34;qqfile&#34; parameter. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system commands to the web root of the application.</p> <p>Unrestricted file upload vulnerability in &#34;op/op.UploadChunks.php&#34; in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the &#34;qqfile&#34; parameter. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system commands to the web root of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-8gcf-w7r4-3qhx gsd-2018-12940 https://cve.radiocsirt.org/vuln/gsd-2018-12940 gsd-2018-12940 https://cve.radiocsirt.org/vuln/gsd-2018-12940