https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:55:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354780 EUVD-2026-354780 https://cve.radiocsirt.org/vuln/euvd-2026-354780 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73849 <p>Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard runs only when $act != &#39;reinstall&#39;. A remote attacker can submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email values to cause file_put_contents(&#39;config.php&#39;, $config) to overwrite the configuration with attacker-controlled database settings and create a new administrator account. No fixed version is available as of this review.</p> <p>Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard runs only when $act != &#39;reinstall&#39;. A remote attacker can submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email values to cause file_put_contents(&#39;config.php&#39;, $config) to overwrite the configuration with attacker-controlled database settings and create a new administrator account. No fixed version is available as of this review.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73849