https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-11-12T15:29:40.193696+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2002-2045 fkie_cve-2002-2045 2026-11-12T15:29:40.242898+00:00

x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.

 https://vulnerability.circl.lu/vuln/ghsa-24cw-v655-38cr GHSA-24cw-v655-38cr 2026-11-12T15:29:40.243011+00:00

x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.

 https://vulnerability.circl.lu/vuln/gsd-2002-2045 gsd-2002-2045 2026-11-12T15:29:40.243045+00:00 gsd-2002-2045