
CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-Field
Security Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field
code-analysisexploitationpapers-research+4

Security Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field

Gitea versions 1.1.0 → 1.12.5 allow authenticated users with "May create git hooks" permission to inject arbitrary shell commands into post-receive…


CVE-2013-2028 python exploit