Cross-site Scripting (XSS)

redaxo/source is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of data in the mediapool feature, allowing a remote attacker to escalate privileges...

GHSA-M5VV-7JXC-8P6X Redaxo Core CMS Cross Site Scripting (XSS)

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

Redaxo Core CMS Cross Site Scripting (XSS)

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo v 5.17, which stems from a mediapool feature that is vulnerable to cross-site scripting attacks and allows remote attackers to elevate privileges...

CVE-2024-50803

The CVE-2024-50803 entry concerns the mediapool feature in Redaxo Core CMS v5.17.1, which is vulnerable to Cross-Site Scripting (XSS) that can escalate privileges. The concrete detail across multiple connected sources confirms a stored XSS vector via mediapool in Redaxo versions prior to 5.18.0, ...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...

Exploit for Cross-site Scripting in Redaxo

CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A st...

PT-2024-34414 · Redaxo · Redaxo Core Cms

Name of the Vulnerable Software and Affected Versions: Redaxo Core CMS version 5.17.1 Description: The mediapool feature of the Redaxo Core CMS application is vulnerable to Cross Site Scripting XSS, which allows a remote attacker to escalate privileges. Recommendations: For Redaxo Core CMS versio...

Directory Traversal

redaxo/source is vulnerable to Directory traversal. The vulnerability is due to insufficient validation of user input in the component /index.php?page=backup/export, allowing malicious actors to craft requests that traverse the file system and access unauthorized files and directories...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper verification of php code as cronjob. An attacker can execute arbitrary code on the server by creating a maliciously crafted cronjob. PoC php Remediation There is no fixed version for redaxo/sourc...

GHSA-37GM-H5WR-PF25 Path traversal in redaxo

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

Path traversal in redaxo

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

PT-2024-31922 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 5.17.1 Description: An issue in the component "/index.php?page=backup/export" of REDAXO CMS allows attackers to execute a directory traversal. Recommendations: For REDAXO CMS version 5.17.1, as a temporary workaround,...