PT-2026-43092

Name of the Vulnerable Software and Affected Versions Redaxo CMS Mediapool Addon versions prior to 5.5.2 Description An arbitrary file upload issue allows authenticated users with editor accounts to bypass file extension blacklist restrictions. By using obfuscated extensions such as php71 or php5...

CVE-2018-25353: Incorrect Authorization

Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions. Attackers with editor accounts can upload executable files by using obfuscated extensions like php71 or php53 to evade the...