334 matches found
CVE-2024-46209
A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...
Yakamara Media Redaxo CMS 安全漏洞
Yakamara Media Redaxo CMS is an open source web portal content management system organized by Yakamara Media. The system supports custom modules, plugin extensions, project backups, and more. A security vulnerability exists in Yakamara Media Redaxo CMS version v5.17.1, which stems from the presen...
CVE-2024-46209
REDAXO CMS v5.17.1 is affected by a stored cross-site scripting (XSS) vulnerability in the /media/test.html component, caused by improper input validation that allows injection via the password parameter. Exploitation details are not provided in the sources, and in-the-wild status is not specifie...
CVE-2024-46209
A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...
CVE-2024-46209
A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...
PT-2025-2731 · Unknown · Redaxo Cms
Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 5.17.1 Description: A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password...
Cross-site Scripting (XSS)
redaxo/source is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization of data in the mediapool feature, allowing a remote attacker to escalate privileges...
Redaxo Core CMS Cross Site Scripting (XSS)
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
GHSA-M5VV-7JXC-8P6X Redaxo Core CMS Cross Site Scripting (XSS)
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
CVE-2024-50803
The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site ScriptingXSS which allows a remote attacker to escalate privileges...
Redaxo 安全漏洞
Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo v 5.17, which stems from a mediapool feature that is vulnerable to cross-site scripting attacks and allows remote attackers to elevate privileges...
CVE-2024-50803
The CVE-2024-50803 entry concerns the mediapool feature in Redaxo Core CMS v5.17.1, which is vulnerable to Cross-Site Scripting (XSS) that can escalate privileges. The concrete detail across multiple connected sources confirms a stored XSS vector via mediapool in Redaxo versions prior to 5.18.0, ...
Exploit for Cross-site Scripting in Redaxo
CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A st...
PT-2024-34414 · Redaxo · Redaxo Core Cms
Name of the Vulnerable Software and Affected Versions: Redaxo Core CMS version 5.17.1 Description: The mediapool feature of the Redaxo Core CMS application is vulnerable to Cross Site Scripting XSS, which allows a remote attacker to escalate privileges. Recommendations: For Redaxo Core CMS versio...
Directory Traversal
redaxo/source is vulnerable to Directory traversal. The vulnerability is due to insufficient validation of user input in the component /index.php?page=backup/export, allowing malicious actors to craft requests that traverse the file system and access unauthorized files and directories...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper verification of php code as cronjob. An attacker can execute arbitrary code on the server by creating a maliciously crafted cronjob. PoC php Remediation There is no fixed version for redaxo/sourc...