GHSA-XJ9J-GJXG-7JVQ REDAXO CMS is vulnerable to RCE attack through its template management component

A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...

EUVD-2025-199601

A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...

CVE-2025-64050

A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...

CVE-2025-64050

A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...

CVE-2025-64050

The CVE describes a Remote Code Execution in REDAXO CMS (v5.20.0) tied to the template management component. An authenticated administrator can inject PHP code into an active template, leading to command execution when frontend pages render the compromised template. Impact is high (CVE metrics sh...

EUVD-2013-5399

Malware in sbrugna...

EUVD-2021-7116

Malicious code in bioql PyPI...

EUVD-2023-36342

Malicious code in bioql PyPI...

CVE-2023-36585

Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.

PT-2023-6148 · Microsoft · Active Template Library +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Active Template Library ATL of Windows operating systems. This can be exploited by a remote attacker to cause a denial of servic...

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability...

Privilege escalation

Active Template Library Elevation of Privilege Vulnerability...

CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability

...

CVE-2023-32055

CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...

CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability

...

PT-2023-3496 · Microsoft · Active Template Library +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Active Template Library ATL and is associated with insufficient access restrictions in Windows operating systems. It allows an attacker to potentially elevate...

Microsoft Windows Active Template Library 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Active Template Library. An attacker could exploit this vulnerability to gain elevated privileges. The...

SUSE CVE-2009-2493

The Active Template Library ATL in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not properly...