| Titel | Yakamara (Frankfurt am Main/Germany redaxo cms <=5.18.3 rce |
|---|
| Beschreibung | In Redaxo CMS, there is an XSS vulnerability in the template section. Users can create their own templates and insert PHP commands. Then, by creating an article that references the template, opening the article will display the command execution results. |
|---|
| Quelle | ⚠️ https://github.com/be2398/aaa/issues/1 |
|---|
| Benutzer | am1reux (UID 83481) |
|---|
| Einreichung | 29.03.2025 11:05 (vor 2 Jahren) |
|---|
| Moderieren | 13.04.2025 19:36 (15 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 253882 [Redaxo 5.15.1 /pages/templates.php erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|