https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 20:58:34 +0000 https://cve.radiocsirt.org/vuln/cve-2019-9651 <p>An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function&#39;s filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions (such as &#34;eval&#34;) are blocked but others (such as &#34;system&#34;) are not, and because &#34;.php&#34; is blocked but &#34;.PHP&#34; is not blocked.</p> <p>An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function&#39;s filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions (such as &#34;eval&#34;) are blocked but others (such as &#34;system&#34;) are not, and because &#34;.php&#34; is blocked but &#34;.PHP&#34; is not blocked.</p> https://cve.radiocsirt.org/vuln/cve-2019-9651