Code injection

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

Yakamara Media Redaxo CMS Security Vulnerability

Yakamara Media Redaxo CMS is Yakamara Media organization of a set of open source Web portal content management system . The system supports custom modules, plugin extensions, project backups and more. A security vulnerability exists in Yakamara Media Redaxo CMS version 5.15.1, which originates fr...

CVE-2024-25298

CVE-2024-25298 affects REDAXO v5.15.1. The issue is an arbitrary code execution vulnerability arising from improper handling of user-supplied input within modules.modules.php, enabling code execution and exposure of sensitive information. Multiple sources (Red Hat, Veracode, OSV, GHSA, CNNVD, CVE...

CVE-2024-25298

An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php...

PT-2024-4029 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: REDAXO version 5.15.1 Description: An issue in REDAXO allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php. The vulnerability is related to incorrect code generation management in the...

CVE-2024-25300

A cross-site scripting XSS vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section...

CVE-2024-25301

Redaxo v5.15.1 was discovered to contain a remote code execution RCE vulnerability via the component /pages/templates.php...

Cross site scripting

A cross-site scripting XSS vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section...

Remote code execution

Redaxo v5.15.1 was discovered to contain a remote code execution RCE vulnerability via the component /pages/templates.php...

CVE-2024-25301

Redaxo v5.15.1 was discovered to contain a remote code execution RCE vulnerability via the component /pages/templates.php...

CVE-2024-25301

CVE-2024-25301 affects Redaxo v5.15.1, with a remote code execution (RCE) vulnerability exposed via the component "/pages/templates.php". Multiple connected sources corroborate the same issue and version. The exact root cause is not fully detailed in the provided documents, but the vulnerability ...

CVE-2024-25301

Redaxo v5.15.1 was discovered to contain a remote code execution RCE vulnerability via the component /pages/templates.php...

Redaxo Security Vulnerability

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo version v5.15.1, which stems from a Remote Code Execution RCE issue in the component /pages/templates.php...

CVE-2024-25300

A cross-site scripting XSS vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section...

CVE-2024-25300

CVE-2024-25300 affects Redaxo v5.15.1, exposing an XSS in the Template section via the Name parameter. The root cause is unsanitized input in Name, allowing arbitrary web scripts/HTML execution. Impact is limited to the affected user/recipient interactions as described (no exploit details provide...

CVE-2024-25301

Redaxo v5.15.1 was discovered to contain a remote code execution RCE vulnerability via the component /pages/templates.php...

CVE-2024-25300

A cross-site scripting XSS vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section...

Redaxo Cross-Site Scripting Vulnerability

Redaxo is a content management system from Redaxo open source. A cross-site scripting vulnerability exists in Redaxo version v5.15.1 that originates from a payload that allows an attacker to execute arbitrary web script or HTML via a payload injected into the Name parameter of the Template sectio...

PT-2024-20871 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: Redaxo version 5.15.1 Description: A remote code execution RCE issue was discovered in Redaxo via the component "/pages/templates.php". This allows for potential code execution by an attacker. Recommendations: For Redaxo version 5.15.1, as a...

PT-2024-20870 · Redaxo · Redaxo

Name of the Vulnerable Software and Affected Versions: Redaxo version 5.15.1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Template section. Recommendations: For Redaxo version...