Lucene search
+L

334 matches found

Github Security Blog
Github Security Blog
added 2024/10/16 9:31 p.m.22 views

Path traversal in redaxo

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

4.9CVSS7.3AI score0.00866EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/10/16 9:15 p.m.10 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

7.2CVSS6.3AI score0.01025EPSS
SaveExploits1References1
NVD
NVD
added 2024/10/16 9:15 p.m.20 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

7.2CVSS0.01025EPSS
SaveExploits1References1
NVD
NVD
added 2024/10/16 9:15 p.m.34 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

4.9CVSS0.00866EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.10 views

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo version v5.17.1. An attacker exploiting this vulnerability could read arbitrary files on the server running the application...

4.9CVSS6.5AI score0.00866EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/16 12:00 a.m.25 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

0.01025EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.14 views

PT-2024-31923 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 2.11.0 Description: A remote code execution RCE vulnerability was discovered in REDAXO CMS. This issue allows for remote code execution, which can lead to severe consequences. Recommendations: For version 2.11.0, update to ...

7.2CVSS7.1AI score0.01025EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.20 views

PT-2024-31922 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 5.17.1 Description: An issue in the component "/index.php?page=backup/export" of REDAXO CMS allows attackers to execute a directory traversal. Recommendations: For REDAXO CMS version 5.17.1, as a temporary workaround,...

4.9CVSS6.3AI score0.00866EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
added 2024/10/16 12:00 a.m.16 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

7.1AI score0.00866EPSS
SaveExploits1References1
CVE
CVE
added 2024/10/16 12:00 a.m.71 views

CVE-2024-46213

CVE-2024-46213 is an RCE vulnerability in REDAXO CMS v2.11.0. Multiple connected sources (Red Hat, NVD, CVE listing, CNNVD, Snyk, PT-Security) collectively confirm the issue but provide limited technical detail in the excerpts. Some sources reference a potentially related cronjob/vector in the re...

7.2CVSS8.5AI score0.01025EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/10/16 12:00 a.m.49 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

0.00866EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.7 views

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo Open Source. A security vulnerability exists in Redaxo version v2.11.0, which stems from the inclusion of a remote code execution vulnerability...

7.2CVSS8AI score0.01025EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/16 12:00 a.m.68 views

CVE-2024-46212

CVE-2024-46212 affects REDAXO CMS v5.17.1, via the /index.php?page=backup/export component. The issue is a directory traversal due to insufficient input validation, enabling attackers to read arbitrary files on the server. Exploitation details are not provided in the documents; some sources note ...

4.9CVSS7.3AI score0.00866EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/16 12:00 a.m.14 views

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

8.3AI score0.01025EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/16 12:00 a.m.10 views

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

4.9CVSS7.3AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/06/10 12:00 a.m.28 views

The vulnerability of the addons/structure/plugins/content/pages/modulesmodules.php component of the REDAXO content management system allows a hacker to execute arbitrary code.

The vulnerability of the addons/structure/plugins/content/pages/modulesmodules.php component of the REDAXO content management system is related to improper handling of code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.01108EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2024/02/19 8:26 a.m.25 views

Remote Code Execution (RCE)

redaxo/source is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of user-supplied input within the 'Template' functionality with in modules.modules.php, which allows attackers to execute arbitrary code...

7.2CVSS8.1AI score0.01108EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/02/17 6:30 a.m.23 views

GHSA-7F2V-5877-RX3X Code injection in REDAXO

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.2CVSS7.2AI score0.01108EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2024/02/17 6:30 a.m.29 views

Code injection in REDAXO

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.2CVSS7.5AI score0.01108EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/02/17 6:15 a.m.18 views

CVE-2024-25298

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

7.2CVSS7.3AI score0.01108EPSS
SaveExploits1References1
Rows per page
Query Builder