334 matches found
CVE-2016-10757
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php...
REDAXO cross-site scripting vulnerability (CNVD-2019-18491)
REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. REDAXO 5.6.3 version of the addons/mediapool/pages/index.php file there is a cross-site scripting vulnerability , a remote attacker can send...
REDAXO Cross-Site Scripting Vulnerability (CNVD-2019-18493)
REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. REDAXO cross-site scripting vulnerability , remote attackers can use index.php?page=mediapool/media&openerinputfield=&args substring to exploit the...
REDAXO SQL Injection Vulnerability (CNVD-2019-18492)
REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. REDAXO 5.6.3 before the version of the core/lib/list.php file 'prepareQuery' function there is a SQL injection vulnerability , a remote attacker can...
REDAXO Cross-Site Scripting Vulnerability
REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. A cross-site scripting vulnerability exists in Mediamanager in versions prior to REDAXO 5.6.4. A remote attacker can exploit this vulnerability to...
REDAXO SQL Injection Vulnerability
REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. A SQL injection vulnerability exists in Benutzerverwaltung in versions prior to REDAXO 5.6.4. A remote attacker can exploit this vulnerability to...
CVE-2018-18198
The $openerinputfield variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attacker can insert XSS payloads via an index.php?page=mediapool/media&openerinputfield=XSS request...
CVE-2018-18200
There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4...
CVE-2018-18200
There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4...
CVE-2018-18199
Mediamanager in REDAXO before 5.6.4 has XSS...
CVE-2018-18199
Mediamanager in REDAXO before 5.6.4 has XSS...
CVE-2018-18198
The $openerinputfield variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attacker can insert XSS payloads via an index.php?page=mediapool/media&openerinputfield=XSS request...
Cross site scripting
Mediamanager in REDAXO before 5.6.4 has XSS...
Sql injection
There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4...
Cross site request forgery (csrf)
The $openerinputfield variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attacker can insert XSS payloads via an index.php?page=mediapool/media&openerinputfield=XSS request...
CVE-2018-18199
Mediamanager in REDAXO before 5.6.4 contains a cross-site scripting (XSS) vulnerability. The issue affects REDAXO prior to version 5.6.4 in the Mediamanager component, enabling a remote attacker to inject arbitrary web script or HTML. Remediation: upgrade to REDAXO 5.6.4 or later (per the officia...
CVE-2018-18198
The CVE-2018-18198 issue affects REDAXO 5.6.3 via addons/mediapool/pages/index.php where the $opener_input_field is not properly filtered and is echoed to the page. This allows an attacker to inject XSS payloads through a request such as index.php?page=mediapool/media&opener_input_field=[XSS]. Re...
CVE-2018-18199
Mediamanager in REDAXO before 5.6.4 has XSS...
CVE-2018-18198
The $openerinputfield variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to the page. The attacker can insert XSS payloads via an index.php?page=mediapool/media&openerinputfield=XSS request...