İçeriğe atla
Noroxi

redaxo kayıtları

redaxo üreticisine ait 28 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%28,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

28 kayıt
  • CVE-2018-17831
    40Planlayın

    In REDAXO before 5.6.3, a critical SQL injection vulnerability has been discovered in the rex_list class because of the prepareQuery functio

    KritikCVSS 9,8İstismar yokEPSS %2

    redaxo · redaxo1 Eki 2018

  • CVE-2018-18200
    39İzleyin

    There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4.

    KritikCVSS 9,8İstismar yokEPSS %1

    redaxo · redaxo9 Eki 2018

  • CVE-2018-15850
    35İzleyin

    An issue was discovered in REDAXO CMS 4.7.2.

    YüksekCVSS 8,8İstismar yokEPSS %0

    redaxo · redaxo cms25 Ağu 2018

  • CVE-2026-21857
    33İzleyin

    Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

    YüksekCVSS 8,3Kavram kanıtıEPSS %0

    redaxo · redaxo7 Oca 2026

  • CVE-2006-2843
    31İzleyin

    PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1) REX[INCLU

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    redaxo · redaxo6 Haz 2006

  • CVE-2006-2844
    31İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REX[I

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    redaxo · redaxo6 Haz 2006

  • CVE-2006-2845
    31İzleyin

    PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REX[I

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    redaxo · redaxo6 Haz 2006

  • CVE-2021-39459
    29İzleyin

    Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code

    YüksekCVSS 7,2İstismar yokEPSS %4

    redaxo · redaxo9 Eyl 2021

  • CVE-2024-25301
    28İzleyin

    Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php.

    YüksekCVSS 7,2İstismar yokEPSS %1

    redaxo · redaxo14 Şub 2024

  • CVE-2024-25298
    28İzleyin

    An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.mo

    YüksekCVSS 7,2İstismar yokEPSS %1

    redaxo · redaxo17 Şub 2024

  • CVE-2024-46213
    28İzleyin

    REDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability.

    YüksekCVSS 7,2İstismar yokEPSS %1

    redaxo · redaxo16 Eki 2024

  • CVE-2025-64050
    28İzleyin

    A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administra

    YüksekCVSS 7,2İstismar yokEPSS %0

    redaxo · redaxo25 Kas 2025

  • CVE-2024-46210
    28İzleyin

    An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploadin

    YüksekCVSS 7,2İstismar yokEPSS %0

    redaxo · redaxo10 Oca 2025

  • CVE-2016-20053
    27İzleyin

    Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint

    OrtaCVSS 6,9İstismar yokEPSS %0

    redaxo · redaxo4 Nis 2026

  • CVE-2021-39458
    26İzleyin

    Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate

    OrtaCVSS 6,5İstismar yokEPSS %1

    redaxo · redaxo9 Eyl 2021

  • CVE-2018-18198
    24İzleyin

    The $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to t

    OrtaCVSS 6,1İstismar yokEPSS %0

    redaxo · redaxo9 Eki 2018

  • CVE-2018-18199
    24İzleyin

    Mediamanager in REDAXO before 5.6.4 has XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    redaxo · redaxo9 Eki 2018

  • CVE-2025-27412
    24İzleyin

    REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation

    OrtaCVSS 6,1İstismar yokEPSS %0

    redaxo · redaxo5 Mar 2025

  • CVE-2025-66026
    24İzleyin

    REDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]

    OrtaCVSS 6,1İstismar yokEPSS %0

    redaxo · redaxo25 Kas 2025

  • CVE-2018-17830
    21İzleyin

    The $args variable in addons/mediapool/pages/index.php in REDAXO 5.6.2 is not effectively filtered, because names are not restricted (only v

    OrtaCVSS 5,4İstismar yokEPSS %0

    redaxo · redaxo1 Eki 2018

  • CVE-2024-50803
    21İzleyin

    The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    redaxo · redaxo19 Kas 2024

  • CVE-2024-46209
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitr

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    redaxo · redaxo6 Oca 2025

  • CVE-2025-27411
    21İzleyin

    REDAXO allows Arbitrary File Upload in the mediapool page

    OrtaCVSS 5,4İstismar yokEPSS %0

    redaxo · redaxo5 Mar 2025

  • CVE-2024-13209
    20İzleyin

    Redaxo CMS Structure Management Page index.php cross site scripting

    OrtaCVSS 5,1İstismar yokEPSS %0

    redaxo · redaxo9 Oca 2025

  • CVE-2024-46212
    19İzleyin

    An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal.

    OrtaCVSS 4,9İstismar yokEPSS %0

    redaxo · redaxo16 Eki 2024