https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:51:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349629 EUVD-2026-349629 https://cve.radiocsirt.org/vuln/euvd-2026-349629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71232 <p>MacCMS10&#39;s admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log.</p> <p>MacCMS10&#39;s admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71232 https://cve.radiocsirt.org/vuln/ghsa-cv48-22qx-mpmx <p>MacCMS10&#39;s admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log. Combined with ThinkPHP&#39;s {if} template tag, which embeds the condition attribute directly into raw PHP (&lt;?php if(condition): ?&gt;), an authenticated administrator could inject a payload such as {if condition=&#34;exec(&#39;id &gt; /tmp/pwned.txt&#39;)&#34;}{/if} to achieve remote code execution. Fixed in commit 71ad3bb29570e110d8e973acff68040a3050ddf0 (2026-06-22), which added the missing functions to the filter.</p> <p>MacCMS10&#39;s admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log. Combined with ThinkPHP&#39;s {if} template tag, which embeds the condition attribute directly into raw PHP (&lt;?php if(condition): ?&gt;), an authenticated administrator could inject a payload such as {if condition=&#34;exec(&#39;id &gt; /tmp/pwned.txt&#39;)&#34;}{/if} to achieve remote code execution. Fixed in commit 71ad3bb29570e110d8e973acff68040a3050ddf0 (2026-06-22), which added the missing functions to the filter.</p> https://cve.radiocsirt.org/vuln/ghsa-cv48-22qx-mpmx