Lucene search
+L

352 matches found

NVD
NVD
added 2024/10/16 9:15 p.m.20 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

7.2CVSS0.01025EPSS
SaveExploits1References1
NVD
NVD
added 2024/10/16 9:15 p.m.35 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

4.9CVSS0.00866EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/10/16 12:00 a.m.25 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

0.01025EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.14 views

PT-2024-31923 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 2.11.0 Description: A remote code execution RCE vulnerability was discovered in REDAXO CMS. This issue allows for remote code execution, which can lead to severe consequences. Recommendations: For version 2.11.0, update to ...

7.2CVSS7.1AI score0.01025EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.11 views

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo version v5.17.1. An attacker exploiting this vulnerability could read arbitrary files on the server running the application...

4.9CVSS6.5AI score0.00866EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/10/16 12:00 a.m.17 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

7.1AI score0.00866EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.21 views

PT-2024-31922 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 5.17.1 Description: An issue in the component "/index.php?page=backup/export" of REDAXO CMS allows attackers to execute a directory traversal. Recommendations: For REDAXO CMS version 5.17.1, as a temporary workaround,...

4.9CVSS6.3AI score0.00866EPSS
SaveExploits1References9
CVE
CVE
added 2024/10/16 12:00 a.m.71 views

CVE-2024-46213

REDAXO CMS v2.11.0 is vulnerable to Remote Code Execution (RCE) due to an Arbitrary Code Injection flaw caused by the improper verification of PHP code used as a cronjob . An attacker can execute arbitrary code on the server by creating a maliciously crafted cronjob. A proof of concept (PoC) is a...

8.5AI score0.01025EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/10/16 12:00 a.m.49 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

0.00866EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/16 12:00 a.m.15 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

8.3AI score0.01025EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.7 views

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo Open Source. A security vulnerability exists in Redaxo version v2.11.0, which stems from the inclusion of a remote code execution vulnerability...

7.2CVSS8AI score0.01025EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/16 12:00 a.m.70 views

CVE-2024-46212

REDAXO CMS v5.17.1 is vulnerable to a directory traversal (or path traversal) flaw in the /index.php?page=backup/export component. An attacker can manipulate file paths in the input using dot-dot-slash (../) sequences or absolute paths to access sensitive files and directories outside the web ser...

7.3AI score0.00866EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/10/16 12:00 a.m.10 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

4.9CVSS7.3AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/10 12:00 a.m.28 views

The vulnerability of the addons/structure/plugins/content/pages/modulesmodules.php component of the REDAXO content management system allows a hacker to execute arbitrary code.

The vulnerability of the addons/structure/plugins/content/pages/modulesmodules.php component of the REDAXO content management system is related to improper handling of code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.01108EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2024/02/19 8:26 a.m.25 views

Remote Code Execution (RCE)

redaxo/source is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of user-supplied input within the 'Template' functionality with in modules.modules.php, which allows attackers to execute arbitrary code...

7.2CVSS8.1AI score0.01108EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2024/02/17 6:30 a.m.29 views

Code injection in REDAXO

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.2CVSS7.5AI score0.01108EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/02/17 6:30 a.m.23 views

GHSA-7F2V-5877-RX3X Code injection in REDAXO

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.2CVSS7.2AI score0.01108EPSS
SaveExploits1References3
NVD
NVD
added 2024/02/17 6:15 a.m.18 views

CVE-2024-25298

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.2CVSS7.3AI score0.01108EPSS
SaveExploits1References1
Prion
Prion
added 2024/02/17 6:15 a.m.29 views

Code injection

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.8AI score0.01108EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/17 12:00 a.m.13 views

Yakamara Media Redaxo CMS Security Vulnerability

Yakamara Media Redaxo CMS is Yakamara Media organization of a set of open source Web portal content management system . The system supports custom modules, plugin extensions, project backups and more. A security vulnerability exists in Yakamara Media Redaxo CMS version 5.15.1, which originates fr...

7.2CVSS7.7AI score0.01108EPSS
SaveExploits1References2
Rows per page
Query Builder