https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 16:01:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-229773 EUVD-2026-229773 https://cve.radiocsirt.org/vuln/euvd-2026-229773 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2297 <p>A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input &lt;?php phpinfo();?&gt; leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input &lt;?php phpinfo();?&gt; leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2297 https://cve.radiocsirt.org/vuln/ghsa-5rjr-j9m9-qpm9 <p>A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input &lt;?php phpinfo();?&gt; leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input &lt;?php phpinfo();?&gt; leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-5rjr-j9m9-qpm9 https://cve.radiocsirt.org/vuln/gsd-2022-2297 gsd-2022-2297 https://cve.radiocsirt.org/vuln/gsd-2022-2297