PT-2024-31923 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 2.11.0 Description: A remote code execution RCE vulnerability was discovered in REDAXO CMS. This issue allows for remote code execution, which can lead to severe consequences. Recommendations: For version 2.11.0, update to ...

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo version v5.17.1. An attacker exploiting this vulnerability could read arbitrary files on the server running the application...

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-46212

An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal...

CVE-2024-46212

CVE-2024-46212 affects REDAXO CMS v5.17.1, via the /index.php?page=backup/export component. The issue is a directory traversal due to insufficient input validation, enabling attackers to read arbitrary files on the server. Exploitation details are not provided in the documents; some sources note ...

CVE-2024-46213

CVE-2024-46213 is an RCE vulnerability in REDAXO CMS v2.11.0. Multiple connected sources (Red Hat, NVD, CVE listing, CNNVD, Snyk, PT-Security) collectively confirm the issue but provide limited technical detail in the excerpts. Some sources reference a potentially related cronjob/vector in the re...

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo Open Source. A security vulnerability exists in Redaxo version v2.11.0, which stems from the inclusion of a remote code execution vulnerability...

CVE-2024-46213

REDAXO CMS v2.11.0 was discovered to contain a remote code execution RCE vulnerability...

The vulnerability of the addons/structure/plugins/content/pages/modulesmodules.php component of the REDAXO content management system allows a hacker to execute arbitrary code.

The vulnerability of the addons/structure/plugins/content/pages/modulesmodules.php component of the REDAXO content management system is related to improper handling of code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Remote Code Execution (RCE)

redaxo/source is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of user-supplied input within the 'Template' functionality with in modules.modules.php, which allows attackers to execute arbitrary code...

GHSA-7F2V-5877-RX3X Code injection in REDAXO

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

Code injection in REDAXO

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

CVE-2024-25298

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

CVE-2024-25298

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

Code injection

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

CVE-2024-25298

CVE-2024-25298 affects REDAXO v5.15.1. The issue is an arbitrary code execution vulnerability arising from improper handling of user-supplied input within modules.modules.php, enabling code execution and exposure of sensitive information. Multiple sources (Red Hat, Veracode, OSV, GHSA, CNNVD, CVE...

Yakamara Media Redaxo CMS Security Vulnerability

Yakamara Media Redaxo CMS is Yakamara Media organization of a set of open source Web portal content management system . The system supports custom modules, plugin extensions, project backups and more. A security vulnerability exists in Yakamara Media Redaxo CMS version 5.15.1, which originates fr...

PT-2024-4029 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: REDAXO version 5.15.1 Description: An issue in REDAXO allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php. The vulnerability is related to incorrect code generation management in the...

CVE-2024-25300

A cross-site scripting XSS vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section...