https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 06:11:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-212235 EUVD-2026-212235 https://cve.radiocsirt.org/vuln/euvd-2026-212235 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31689 <p>In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution.</p> <p>In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-31689 https://cve.radiocsirt.org/vuln/ghsa-rq34-mcvw-8gj8 <p>In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution.</p> <p>In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution.</p> https://cve.radiocsirt.org/vuln/ghsa-rq34-mcvw-8gj8 https://cve.radiocsirt.org/vuln/gsd-2023-31689 gsd-2023-31689 https://cve.radiocsirt.org/vuln/gsd-2023-31689