Lucene search
HistoryFeb 02, 2011 - 1:00 a.m.
CVE-2010-3929
cve-2010-3929
sql injection
modx evolution
ajaxsearch
nvd
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.2%
SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Affected configurations
Node
modxcmsevolutionRange≤1.0.4
ORmodxcmsevolutionMatch0.9.0
ORmodxcmsevolutionMatch0.9.1
ORmodxcmsevolutionMatch0.9.2.1
ORmodxcmsevolutionMatch0.9.5
ORmodxcmsevolutionMatch0.9.6
ORmodxcmsevolutionMatch0.9.6.1
ORmodxcmsevolutionMatch0.9.6.1p1
ORmodxcmsevolutionMatch0.9.6.2
ORmodxcmsevolutionMatch1.0.2
ORmodxcmsevolutionMatch1.0.3
Related
jvn
jvn
JVN#54092716: MODx Evolution vulnerable to SQL injection
2011-01-26 00:00:00
prion
prion
Sql injection
2011-02-02 01:00:00
cvelist
cvelist
CVE-2010-3929
2011-02-02 00:00:00
nvd
nvd
CVE-2010-3929
2011-02-02 01:00:03
8.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.2%
Related for CVE-2010-3929