https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:12:09 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-22694 cnvd-2020-22694 https://cve.radiocsirt.org/vuln/cnvd-2020-22694 https://cve.radiocsirt.org/vuln/euvd-2026-58014 EUVD-2026-58014 https://cve.radiocsirt.org/vuln/euvd-2026-58014 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16951 <p>A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one&#39;s own domain name. When the product calls this domain after the POST request is sent, it retrieves an attacker&#39;s data and displays it. Also worth mentioning is the amount of information sent in the request from this product to the attacker: it reveals information the public should not have. This includes pathnames and internal ip addresses.</p> <p>A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one&#39;s own domain name. When the product calls this domain after the POST request is sent, it retrieves an attacker&#39;s data and displays it. Also worth mentioning is the amount of information sent in the request from this product to the attacker: it reveals information the public should not have. This includes pathnames and internal ip addresses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-16951 https://cve.radiocsirt.org/vuln/ghsa-g3cx-px6h-qw53 <p>A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one&#39;s own domain name. When the product calls this domain after the POST request is sent, it retrieves an attacker&#39;s data and displays it. Also worth mentioning is the amount of information sent in the request from this product to the attacker: it reveals information the public should not have. This includes pathnames and internal ip addresses.</p> <p>A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one&#39;s own domain name. When the product calls this domain after the POST request is sent, it retrieves an attacker&#39;s data and displays it. Also worth mentioning is the amount of information sent in the request from this product to the attacker: it reveals information the public should not have. This includes pathnames and internal ip addresses.</p> https://cve.radiocsirt.org/vuln/ghsa-g3cx-px6h-qw53 https://cve.radiocsirt.org/vuln/gsd-2019-16951 gsd-2019-16951 https://cve.radiocsirt.org/vuln/gsd-2019-16951