327 matches found
Cross-site Scripting (XSS)
redaxo/source is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of data in the mediapool feature, allowing a remote attacker to escalate privileges...
Redaxo Core CMS Cross Site Scripting (XSS)
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
GHSA-M5VV-7JXC-8P6X Redaxo Core CMS Cross Site Scripting (XSS)
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
Redaxo 安全漏洞
Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo v 5.17, which stems from a mediapool feature that is vulnerable to cross-site scripting attacks and allows remote attackers to elevate privileges...
CVE-2024-50803
The CVE-2024-50803 entry concerns the mediapool feature in Redaxo Core CMS v5.17.1, which is vulnerable to Cross-Site Scripting (XSS) that can escalate privileges. The concrete detail across multiple connected sources confirms a stored XSS vector via mediapool in Redaxo versions prior to 5.18.0, ...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
Exploit for Cross-site Scripting in Redaxo
CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A st...
PT-2024-34414 · Redaxo · Redaxo Core Cms
Name of the Vulnerable Software and Affected Versions: Redaxo Core CMS version 5.17.1 Description: The mediapool feature of the Redaxo Core CMS application is vulnerable to Cross Site Scripting XSS, which allows a remote attacker to escalate privileges. Recommendations: For Redaxo Core CMS versio...
Directory Traversal
redaxo/source is vulnerable to Directory traversal. The vulnerability is due to insufficient validation of user input in the component /index.php?page=backup/export, allowing malicious actors to craft requests that traverse the file system and access unauthorized files and directories...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper verification of php code as cronjob. An attacker can execute arbitrary code on the server by creating a maliciously crafted cronjob. PoC php Remediation There is no fixed version for redaxo/sourc...
Path traversal in redaxo
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...
GHSA-37GM-H5WR-PF25 Path traversal in redaxo
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...
CVE-2024-46213
REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...
CVE-2024-46213
REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...
CVE-2024-46212
An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...