CVE-2025-57567

A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor , specifically within the minify.php file located in the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator can exploit this by overwriting the file with arbitrary PHP code via t...

PluXml 安全漏洞

PluXml is a free open source content management system from PluXml Open Source that does not require a database to work. A security vulnerability exists in PluXml that stems from a minify.php file in the default theme directory that allows administrators to override arbitrary PHP code via the adm...

CVE-2025-57567

A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...

CVE-2025-57567: Improper Control of Generation of Code

A remote code execution RCE vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory /themes/defaut/css/minify.php. An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel,...

EUVD-2017-1614

Malware in sbrugna...

EUVD-2021-25043

Malware in sbrugna...

EUVD-2007-3417

Malware in sbrugna...

EUVD-2020-10112

Malware in sbrugna...

EUVD-2021-25042

Malware in sbrugna...

EUVD-2012-4599

Malware in sbrugna...

EUVD-2007-3526

Malware in sbrugna...

EUVD-2012-4600

Malware in sbrugna...

EUVD-2022-29764

Malicious code in bioql PyPI...

EUVD-2022-29466

Malicious code in bioql PyPI...

EUVD-2022-29464

Malicious code in bioql PyPI...

EUVD-2022-29465

Malicious code in bioql PyPI...

EUVD-2022-29766

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-18185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment. CVE-2020-18185 Note th...

Linux Distros Unpatched Vulnerability : CVE-2022-25020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path ...

Linux Distros Unpatched Vulnerability : CVE-2021-38603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field. CVE-2021-38603 Note that Nessus relies on the presence of the package as reporte...