Lucene search
+L

54 matches found

NVD
NVD
•added 2026/10/13 4:17 p.m.•8 views

CVE-2026-110025

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/incfront/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POSTname causes unrestricted upload. The attack can be initiated...

7.5CVSS0.00375EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2026/10/13 3:41 p.m.•37 views

CVE-2026-110025 slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/incfront/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POSTname causes unrestricted upload. The attack can be initiated...

7.5CVSS0.00375EPSS
SaveExploits1References8
osv_cve
osv_cve
•added 2026/10/13 3:41 p.m.•13 views

CVE-2026-110025 slackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/incfront/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POSTname causes unrestricted upload. The attack can be initiated...

6.9CVSS5.2AI score
SaveExploits0References10
CVE
CVE
•added 2026/10/13 3:41 p.m.•22 views

CVE-2026-110025

A flaw in slackero phpwcms (versions up to 1.9.49/1.12.3) allows for unrestricted upload via remote exploitation. The vulnerability exists in the Extension Check component, specifically within the file include/inc_front/content/cnt23.article.inc.php. Attackers can trigger this by manipulating the...

7.5CVSS6.7AI score0.00375EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-110025: Unrestricted Upload of File with Dangerous Type

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/incfront/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POSTname causes unrestricted upload. The attack can be initiated...

7.5CVSS6.7AI score0.00375EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-16727

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00639EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-16733

Malicious code in bioql PyPI...

7.5CVSS7.1AI score0.00776EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2021-34137

Malicious code in bioql PyPI...

6.1CVSS5.3AI score0.00555EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-16732

Malicious code in bioql PyPI...

6.5CVSS5.7AI score0.00522EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2021-34136

Malicious code in bioql PyPI...

9.8CVSS6.7AI score0.00723EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/06/05 2:14 p.m.•35 views

CVE-2025-5499

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS7AI score0.00776EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/05 2:14 p.m.•36 views

CVE-2025-5498

A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical. This issue affects the function filegetcontents/isfile of the file include/inclib/content/cnt21.readform.inc.php of the component Custom Source Tab. The manipulation of the argument cpagecustom leads...

6.5CVSS6.9AI score0.00522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/05 1:21 p.m.•36 views

CVE-2025-5497

A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8. The impacted element is an unknown function of the file include/incmodule/modfeedimport/inc/processing.inc.php of the component Feedimport Module. Performing manipulation of the argument cnttext results in deserialization. The...

9.8CVSS6.3AI score0.00639EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/03 2:15 p.m.•36 views

CVE-2025-5498

A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical. This issue affects the function filegetcontents/isfile of the file include/inclib/content/cnt21.readform.inc.php of the component Custom Source Tab. The manipulation of the argument cpagecustom leads...

7.2CVSS0.00522EPSS
SaveExploits1References7
NVD
NVD
•added 2025/06/03 2:15 p.m.•30 views

CVE-2025-5499

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS0.00776EPSS
SaveExploits1References6
CVE
CVE
•added 2025/06/03 1:31 p.m.•89 views

CVE-2025-5499

Slackero phpwcms versions up to 1.9.45 and 1.10.8 are affected. The vulnerability is in image_resized.php, specifically the is_file/getimagesize usage, where manipulation of the imgfile argument leads to deserialization. This can be exploited remotely and has been publicly disclosed. Remediation:...

9.8CVSS7.3AI score0.00776EPSS
SaveExploits1References6Affected Software1
Mend
Mend
•added 2025/06/03 1:31 p.m.•10 views

CVE-2025-5499

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS0.00776EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/06/03 1:31 p.m.•35 views

CVE-2025-5499 slackero phpwcms image_resized.php getimagesize deserialization

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS0.00776EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/06/03 1:31 p.m.•18 views

CVE-2025-5499 slackero phpwcms image_resized.php getimagesize deserialization

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS7.3AI score0.00776EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/06/03 1:31 p.m.•16 views

CVE-2025-5499 slackero phpwcms image_resized.php getimagesize deserialization

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function isfile/getimagesize of the file imageresized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit ha...

6.9CVSS6.4AI score
SaveExploits0References8
Rows per page
Query Builder