| Titolo | Yakamara (Frankfurt am Main/Germany redaxo cms <=5.18.3 rce |
|---|
| Descrizione | In Redaxo CMS, there is an XSS vulnerability in the template section. Users can create their own templates and insert PHP commands. Then, by creating an article that references the template, opening the article will display the command execution results. |
|---|
| Fonte | ⚠️ https://github.com/be2398/aaa/issues/1 |
|---|
| Utente | am1reux (UID 83481) |
|---|
| Sottomissione | 29/03/2025 11:05 (2 anni fa) |
|---|
| Moderazione | 13/04/2025 19:36 (15 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 253882 [Redaxo 5.15.1 /pages/templates.php escalationi di privilegi] |
|---|
| Punti | 0 |
|---|