2937743 matches found
MINI-9PCC-RF9J-86X5
Bulletin has no description...
MINI-F2R5-5WJQ-HV95
Bulletin has no description...
MINI-65VQ-57QJ-GHR8
Bulletin has no description...
MINI-G3JV-X3QC-XV93
Bulletin has no description...
MINI-5FM3-9PX3-C9GP
Bulletin has no description...
MINI-897P-JJ99-MF8W
Bulletin has no description...
MINI-8G86-M9W2-R6RG
Bulletin has no description...
MINI-5793-VMM6-CM6P
Bulletin has no description...
MINI-H6C3-HQ4M-V9RJ
Bulletin has no description...
MINI-VCHC-8F36-99FM
Bulletin has no description...
MINI-3WC2-287C-PVPX
Bulletin has no description...
MINI-J4R5-9XGQ-X87W
Bulletin has no description...
MINI-WMRR-RFWW-G7VF
Bulletin has no description...
MINI-XG7H-X72Q-V7XM
Bulletin has no description...
MINI-MG63-HQH2-X6PP
Bulletin has no description...
MINI-MP54-9C96-76QV
Bulletin has no description...
MINI-GC67-QM4W-9378
Bulletin has no description...
GHSA-98PP-VCCM-QM25 Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
Summary rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php accepts filenames that contain a blocked extension as a non-terminal segment of a longer extension chain, for example shell.php.any.jpg. The check only catches the blocked extension when it appears at the en...
Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
Summary rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php accepts filenames that contain a blocked extension as a non-terminal segment of a longer extension chain, for example shell.php.any.jpg. The check only catches the blocked extension when it appears at the en...