redaxo
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 32 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 6, 2006 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers
Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php
Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint
Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
REDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]
REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation
Monitor redaxo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.