Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:09:17 +0000 cnvd-2019-00336 https://vulnerability.circl.lu/vuln/cnvd-2019-00336 cnvd-2019-00336 https://vulnerability.circl.lu/vuln/cnvd-2019-00336 fkie_cve-2018-19404 https://vulnerability.circl.lu/vuln/fkie_cve-2018-19404 <p>In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&amp;url= followed by that URL. This is related to the onlineinstall and import functions.</p> <p>In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&amp;url= followed by that URL. This is related to the onlineinstall and import functions.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-19404 GHSA-jm69-h2qj-3qwx https://vulnerability.circl.lu/vuln/ghsa-jm69-h2qj-3qwx <p>In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&amp;url= followed by that URL. This is related to the onlineinstall and import functions.</p> <p>In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting index.php?r=appmanage/index/onlineinstall&amp;url= followed by that URL. This is related to the onlineinstall and import functions.</p> https://vulnerability.circl.lu/vuln/ghsa-jm69-h2qj-3qwx gsd-2018-19404 https://vulnerability.circl.lu/vuln/gsd-2018-19404 gsd-2018-19404 https://vulnerability.circl.lu/vuln/gsd-2018-19404