Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload via the mediapool/media page. An attacker can execute malicious code and potentially distribute malware by uploading a file with a modified filename and content-type to masquerade as a benign file type, then tricki...

REDAXO allows Arbitrary File Upload in the mediapool page

Summary An arbitrary file upload vulnerability was identified in the redaxo. This flaw permits users to upload malicious files, which can lead to JavaScript code execution and distribute malware. Details On the latest version of Redaxo, v5.18.2, the mediapool/media page is vulnerable to arbitrary...

CVE-2025-27411 REDAXO allows Arbitrary File Upload in the mediapool page

REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2025-2732 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: Redaxo CMS version 5.17.1 Description: An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For Redaxo CMS version 5.17.1,...

CVE-2024-46210

CVE-2024-46210 describes an arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 that can allow attackers to execute arbitrary code via uploading a crafted file. Documents consistently identify the affected component as the MediaPool module and the target version as R...

REDAXO 安全漏洞

REDAXO is a content management system from REDAXO open source. A security vulnerability exists in REDAXO v5.17.1, which originates from an arbitrary file upload in the MediaPool module, allowing an attacker to execute arbitrary code by uploading a crafted file...

CVE-2024-46210

An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the mediapool feature. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. The injected script gets...

GHSA-M5VV-7JXC-8P6X Redaxo Core CMS Cross Site Scripting (XSS)

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

Redaxo Core CMS Cross Site Scripting (XSS)

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

CVE-2024-50803

The CVE-2024-50803 entry concerns the mediapool feature in Redaxo Core CMS v5.17.1, which is vulnerable to Cross-Site Scripting (XSS) that can escalate privileges. The concrete detail across multiple connected sources confirms a stored XSS vector via mediapool in Redaxo versions prior to 5.18.0, ...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo v 5.17, which stems from a mediapool feature that is vulnerable to cross-site scripting attacks and allows remote attackers to elevate privileges...

Exploit for Cross-site Scripting in Redaxo

CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A st...

PT-2024-34414 · Redaxo · Redaxo Core Cms

Name of the Vulnerable Software and Affected Versions: Redaxo Core CMS version 5.17.1 Description: The mediapool feature of the Redaxo Core CMS application is vulnerable to Cross Site Scripting XSS, which allows a remote attacker to escalate privileges. Recommendations: For Redaxo Core CMS versio...