Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 07:41:18 +0000 CVE-2012-10050 — CuteFlow <= 2.11.2 Arbitrary File Upload RCE https://cve.radiocsirt.org/vuln/cve-2012-10050 <p><strong>Affected:</strong> CuteFlow.org CuteFlow</p> <p>CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script. The application fails to validate or restrict uploaded file types, allowing unauthenticated attackers to upload arbitrary PHP files to the upload/___1/ directory. These files are then accessible via the web server, enabling remote code execution.</p> <p><strong>Affected:</strong> CuteFlow.org CuteFlow</p> <p>CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script. The application fails to validate or restrict uploaded file types, allowing unauthenticated attackers to upload arbitrary PHP files to the upload/___1/ directory. These files are then accessible via the web server, enabling remote code execution.</p> https://cve.radiocsirt.org/vuln/cve-2012-10050