https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T20:35:56.999299+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2010-5091 fkie_cve-2010-5091 2026-09-29T20:35:57.001646+00:00

The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.

 https://vulnerability.circl.lu/vuln/ghsa-mrv2-38v6-5385 GHSA-mrv2-38v6-5385 2026-09-29T20:35:57.001735+00:00

The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.

 https://vulnerability.circl.lu/vuln/gsd-2010-5091 gsd-2010-5091 2026-09-29T20:35:57.001760+00:00 gsd-2010-5091