Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 03:49:28 +0000 cnvd-2018-23735 https://cve.radiocsirt.org/vuln/cnvd-2018-23735 cnvd-2018-23735 https://cve.radiocsirt.org/vuln/cnvd-2018-23735 EUVD-2026-69611 https://cve.radiocsirt.org/vuln/euvd-2026-69611 EUVD-2026-69611 https://cve.radiocsirt.org/vuln/euvd-2026-69611 fkie_cve-2018-19135 https://cve.radiocsirt.org/vuln/fkie_cve-2018-19135 <p>ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the &#34;/assets/files&#34; directory.</p> <p>ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the &#34;/assets/files&#34; directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-19135 GHSA-9qv9-4mjj-m5qc https://cve.radiocsirt.org/vuln/ghsa-9qv9-4mjj-m5qc <p>ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the &#34;/assets/files&#34; directory.</p> <p>ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the &#34;/assets/files&#34; directory.</p> https://cve.radiocsirt.org/vuln/ghsa-9qv9-4mjj-m5qc gsd-2018-19135 https://cve.radiocsirt.org/vuln/gsd-2018-19135 gsd-2018-19135 https://cve.radiocsirt.org/vuln/gsd-2018-19135