CVE-2018-25353— Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
Possible ATT&CK Techniques 1AI
T1505.003 · Web ShellAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Redaxo | Redaxo CMS Mediapool | ≤ 5.5.1 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-25353
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload
Source: CVE Program / CVE List V5
Vulnerability Description
Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions. Attackers with editor accounts can upload executable files by using obfuscated extensions like php71 or php53 to evade the blacklist filter and execute arbitrary code.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Yakamara Media Redaxo CMS Mediapool Addon 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Yakamara Media Redaxo CMS Mediapool Addon是Yakamara Media公司的一个REDAXO内容管理系统的媒体资源管理扩展。 Yakamara Media Redaxo CMS Mediapool Addon 5.5.1及之前版本存在安全漏洞，该漏洞源于任意文件上传，可能导致已认证用户通过使用混淆扩展名绕过文件扩展名黑名单限制并执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Redaxo | Redaxo CMS Mediapool | 0 ~ 5.5.1 | - |
II. Public POCs for CVE-2018-25353
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-25353
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-25353 (1)
Exploits & Public PoCs for CVE-2018-25353 (1)
Vendor Pages for CVE-2018-25353 (1)
Other References for CVE-2018-25353 (1)
IV. Related Vulnerabilities
Same vendor: Redaxo
- CVE-2026-53599
Redaxo has a Mediapool isAllowedExtension bypass via multi-s - CVE-2016-20053
Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint - CVE-2026-21857
Redaxo has Path Traversal in Backup Addon Leading to Arbitra - CVE-2025-66026
REDAXO is Vulnerable to Reflected XSS in Mediapool Info Bann - CVE-2025-27412
REDAXO allows Authenticated Reflected Cross Site Scripting -
Same weakness: CWE-863
- CVE-2026-66792
Multicloud-operators-subscription: multicloud-operators-subs - CVE-2026-10527
Boards plugin retains Board Admin rights for users demoted t - CVE-2026-15754
Missing per-channel team-scope check in ABAC access control - CVE-2026-16044
Insufficient validation of guest board admin privileges on a - CVE-2026-16045
Delegated OAuth tokens could revoke unrelated OAuth applicat
V. Comments for CVE-2018-25353
No comments yet