CVE-2026-42796

Arelle versions prior to 2.39.10 are vulnerable to an unauthenticated remote code execution (RCE) vulnerability within the /rest/configure REST endpoint. The flaw exists because the plugins query parameter is forwarded to the plugin manager without proper authentication or authorization. An attac...

EUVD-2017-9638

Malware in sbrugna...

security flaw

PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by...