https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:24:59 +0000 https://cve.radiocsirt.org/vuln/cve-2026-63302 <p><strong>Affected:</strong> OpenSolution Quick.CMS</p> <p>Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application&#39;s directory structure via a crafted HTTP request. Successful exploitation allows disclosure of the server&#39;s directory structure and absolute file paths (path disclosure).</p> <p>The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.</p> <p><strong>Affected:</strong> OpenSolution Quick.CMS</p> <p>Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application&#39;s directory structure via a crafted HTTP request. Successful exploitation allows disclosure of the server&#39;s directory structure and absolute file paths (path disclosure).</p> <p>The vendor assessed the likelihood of exploitation as very low and determined that a fix is not necessary.</p> https://cve.radiocsirt.org/vuln/cve-2026-63302