https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T08:24:37.030515+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2018-21334 cnvd-2018-21334 2026-10-06T08:24:38.380738+00:00 cnvd-2018-21334 https://vulnerability.circl.lu/vuln/fkie_cve-2018-18382 fkie_cve-2018-18382 2026-10-06T08:24:38.380799+00:00

Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action.

 https://vulnerability.circl.lu/vuln/ghsa-rw83-94pj-5qh2 GHSA-rw83-94pj-5qh2 2026-10-06T08:24:38.380847+00:00

Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action.

 https://vulnerability.circl.lu/vuln/gsd-2018-18382 gsd-2018-18382 2026-10-06T08:24:38.380871+00:00 gsd-2018-18382