https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:05:11 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-16055 cnvd-2019-16055 https://cve.radiocsirt.org/vuln/cnvd-2019-16055 https://cve.radiocsirt.org/vuln/euvd-2026-54352 EUVD-2026-54352 https://cve.radiocsirt.org/vuln/euvd-2026-54352 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11401 <p>A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the &#34;as&#34; substring is deleted.</p> <p>A issue was discovered in SiteServer CMS 6.9.0. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension .aassp, which is converted to .asp because the &#34;as&#34; substring is deleted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11401 https://cve.radiocsirt.org/vuln/ghsa-ff4w-8chr-w2x9 <p><strong>Affected:</strong> NuGet: sscms</p> <p>A issue was discovered in SiteServer CMS prior to version 6.12. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension `.aassp`, which is converted to `.asp` because the &#34;as&#34; substring is deleted.</p> <p><strong>Affected:</strong> NuGet: sscms</p> <p>A issue was discovered in SiteServer CMS prior to version 6.12. It allows remote attackers to execute arbitrary code because an administrator can add the permitted file extension `.aassp`, which is converted to `.asp` because the &#34;as&#34; substring is deleted.</p> https://cve.radiocsirt.org/vuln/ghsa-ff4w-8chr-w2x9 https://cve.radiocsirt.org/vuln/gsd-2019-11401 gsd-2019-11401 https://cve.radiocsirt.org/vuln/gsd-2019-11401