https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:35:52 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2010-5091 <p>The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.</p> <p>The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2010-5091 https://vulnerability.circl.lu/vuln/ghsa-mrv2-38v6-5385 <p>The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.</p> <p>The setName function in filesystem/File.php in SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1 allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing the extension of an uploaded file.</p> https://vulnerability.circl.lu/vuln/ghsa-mrv2-38v6-5385 https://vulnerability.circl.lu/vuln/gsd-2010-5091 gsd-2010-5091 https://vulnerability.circl.lu/vuln/gsd-2010-5091