Remote code execution

2019-05-2418:29:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.0%

JSON

In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php.

CPENameOperatorVersion
readaxoeq5.2.0

CPE	Name	Operator	Version
	readaxo	eq	5.2.0

References

blog.ripstech.com/2016/redaxo-remote-code-execution-via-csrf/

demo.ripstech.com/projects/redaxo_5.2.0