https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:00:24 +0000 https://vulnerability.circl.lu/vuln/cnvd-2018-02171 cnvd-2018-02171 https://vulnerability.circl.lu/vuln/cnvd-2018-02171 https://vulnerability.circl.lu/vuln/fkie_cve-2018-3814 <p>Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the &#34;Assets-&gt;Upload files&#34; screen and then the &#34;Replace it&#34; option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.</p> <p>Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the &#34;Assets-&gt;Upload files&#34; screen and then the &#34;Replace it&#34; option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-3814 https://vulnerability.circl.lu/vuln/ghsa-r342-vjc4-wrmj <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the &#34;Assets-&gt;Upload files&#34; screen and then the &#34;Replace it&#34; option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.</p> <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>Craft CMS 2.6.3000 allows remote attackers to execute arbitrary PHP code by using the &#34;Assets-&gt;Upload files&#34; screen and then the &#34;Replace it&#34; option, because this allows a .jpg file to have embedded PHP code, and then be renamed to a .php extension.</p> https://vulnerability.circl.lu/vuln/ghsa-r342-vjc4-wrmj https://vulnerability.circl.lu/vuln/gsd-2018-3814 gsd-2018-3814 https://vulnerability.circl.lu/vuln/gsd-2018-3814