Lucene search

K
jvnJapan Vulnerability NotesJVN:72630020
HistoryJan 09, 2009 - 12:00 a.m.

JVN#72630020 MODx vulnerable to SQL injection

2009-01-0900:00:00
Japan Vulnerability Notes
jvn.jp
15

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

82.2%

MODx, an open source contents management system, contains a SQL injection vulnerability in the MODx Control Panel.

Impact

A remote attacker could obtain administrative privileges of MODx.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

  • MODx 0.9.6.2 and earlier

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.008

Percentile

82.2%

Related for JVN:72630020