https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 07:01:45 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2002-2045 <p>x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.</p> <p>x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2002-2045 https://vulnerability.circl.lu/vuln/ghsa-24cw-v655-38cr <p>x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.</p> <p>x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message.</p> https://vulnerability.circl.lu/vuln/ghsa-24cw-v655-38cr https://vulnerability.circl.lu/vuln/gsd-2002-2045 gsd-2002-2045 https://vulnerability.circl.lu/vuln/gsd-2002-2045