https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:35:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04795 bdu:2020-04795 https://cve.radiocsirt.org/vuln/bdu:2020-04795 https://cve.radiocsirt.org/vuln/cnvd-2020-24016 cnvd-2020-24016 https://cve.radiocsirt.org/vuln/cnvd-2020-24016 https://cve.radiocsirt.org/vuln/euvd-2026-40875 EUVD-2026-40875 https://cve.radiocsirt.org/vuln/euvd-2026-40875 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11811 <p>In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file.</p> <p>In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11811 https://cve.radiocsirt.org/vuln/ghsa-534r-p456-vxp5 <p>In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file.</p> <p>In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file.</p> https://cve.radiocsirt.org/vuln/ghsa-534r-p456-vxp5 https://cve.radiocsirt.org/vuln/gsd-2020-11811 gsd-2020-11811 https://cve.radiocsirt.org/vuln/gsd-2020-11811