https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 09:18:26 +0000 https://cve.radiocsirt.org/vuln/cve-2020-37073 <p><strong>Affected:</strong> VictorAlagwu CMSsite</p> <p>Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content through the user_image parameter. Attackers can upload a malicious PHP shell to the /img/ directory and execute system commands by accessing the uploaded file with a &#39;cmd&#39; parameter.</p> <p><strong>Affected:</strong> VictorAlagwu CMSsite</p> <p>Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content through the user_image parameter. Attackers can upload a malicious PHP shell to the /img/ directory and execute system commands by accessing the uploaded file with a &#39;cmd&#39; parameter.</p> https://cve.radiocsirt.org/vuln/cve-2020-37073