Description (CNA)
In Redaxo 5.2.0, the cron management of the admin panel suffers from CSRF that leads to arbitrary Remote Code Execution via addons/cronjob/lib/types/phpcode.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://blog.ripstech.com/2016/redaxo-remote-code-execution-via-csrf/
- https://demo.ripstech.com/projects/redaxo_5.2.0
ADP enrichment
No English description supplied.