CVE-2018-17831

In REDAXO before 5.6.3, a critical SQL injection vulnerability has been discovered in the rexlist class because of the prepareQuery function in core/lib/list.php, via the index.php?page=users/users sort parameter. Endangered was the backend and the frontend only if rexlist were used...

CVE-2018-17830

The CVE-2018-17830 entry concerns REDAXO 5.6.2 where the $args variable in addons/mediapool/pages/index.php is not effectively filtered because parameter names are not restricted (only values). This allows an attacker to inject XSS payloads via the URL parameter like index.php?page=mediapool/medi...

CVE-2018-17831

CVE-2018-17831 affects REDAXO prior to 5.6.3. The vulnerability is a SQL injection in the rex_list class caused by the prepareQuery function in core/lib/list.php, exploitable via index.php?page=users/users with the sort parameter. Impact concerns backend and also frontend when rex_list is used. T...

REDAXO CMS Cross-Site Request Forgery Vulnerability

REDAXO CMS is an open source content management system CMS. The system supports custom modules , plug-in extensions , project backup and so on. A cross-site request forgery vulnerability exists in REDAXO CMS version 4.7.2. A remote attacker can add an administrator account with the help of...

CVE-2018-15850

An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user...

CVE-2018-15850

An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user...

Cross site request forgery (csrf)

An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user...

CVE-2018-15850

CVE-2018-15850 affects REDAXO CMS 4.7.2, where a CSRF flaw enables an attacker to add an administrator account via index.php?page=user. Public sources (NVD/NVD-derived entries and CNVD) describe a CSRF vulnerability in REDAXO CMS 4.7.2 with the described impact. CVSS data indicate a network-based...

CVE-2018-15850

An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user...

Redaxo CMS Mediapool Plugin File Upload Vulnerability

Redaxo CMS is an open source Web portal content management system CMS. The system supports custom modules , plug-in extensions , project backup and so on. Redaxo CMS Mediapool plugin file upload vulnerability , an attacker can exploit the vulnerability to upload arbitrary files...

Redaxo CMS Mediapool Addon < 5.5.1 - Arbitrary File Upload

Exploit Title: Redaxo CMS Mediapool Addon 5.5.1 - Arbitrary File Upload Date: 2018-06-13 Exploit Author: mn@HackerWerkstatt Vendor Homepage: https://redaxo.org Software Link: https://redaxo.org/download/redaxo/5.5.1.zip Version: 5.5.1 and older Tested on: LinuxMint More: Login required PoC In the...

Redaxo CMS Mediapool Addon 5.5.1 - Arbitrary File Upload

Redaxo CMS Mediapool Addon 5.5.1 - Arbitrary File Upload Exploit Title: Redaxo CMS Mediapool Addon 5.5.1 - Arbitrary File Upload Date: 2018-06-13 Exploit Author: mn@HackerWerkstatt Vendor Homepage: https://redaxo.org Software Link: https://redaxo.org/download/redaxo/5.5.1.zip Version: 5.5.1 and...

Redaxo CMS Mediapool Arbitrary File Upload

Exploit Title: Redaxo CMS Mediapool Addon 5.5.1 - Arbitrary File Upload Date: 2018-06-13 Exploit Author: mn@HackerWerkstatt Vendor Homepage: https://redaxo.org Software Link: https://redaxo.org/download/redaxo/5.5.1.zip Version: 5.5.1 and older Tested on: LinuxMint More: Login required PoC In the...

Redaxo CMS Mediapool Addon < 5.5.1 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Redaxo CMS Mediapool Addon 5.5.1 - Arbitrary File Upload Exploit Author: email protected Vendor Homepage: https://redaxo.org Software Link: https://redaxo.org/download/redaxo/5.5.1.zip Version: 5.5.1 and older Tested on: LinuxMi...

Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection

Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Date: 01.03.2018 Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code +...

Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection

Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Date: 01.03.2018 Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code + redaxo/src/addons/myevents/pages/eventadd.php...

Redaxo CMS Addon MyEvents 2.2.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code +...

Redaxo CMS Addon MyEvents 2.2.1 SQL Injection

Exploit Title: Redaxo CMS Addon MyEvents SQL Injection Backend Date: 01.03.2018 Exploit Author: h0n1gsp3cht Vendor Homepage: http://www.github.com/wende60/myevents Version: 2.2.1 Last Version Tested on: LinuxMint More: Login Required GET Vuln Code + redaxo/src/addons/myevents/pages/eventadd.php...

Redaxo 5.2.0: Remote Code Execution via CSRF

RIPS Analysis When inspecting the charts generated by RIPS, a code execution vulnerability indicated as critical catches our eye. Investigating this issue closer quickly reveals that the vulnerability lies in the administrator panel, seemingly nulling the severity of the vulnerability. We will se...

Redaxo 5.2.0 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title : redaxo CMS CSRFAdd Admin Author : Ashiyane Digital Security Team Google Dork : intitle:Login · REDAXO Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.redaxo.org/ Software link...