MODx CMS base_path Parameter Remote File Inclusion

The remote web server is running MODx CMS, an open source content management system. The version of MODx CMS installed on the remote host fails to sanitize input to the 'basepath' parameter before using it in the 'manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php' script to includ...

CVE-2006-5730

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...

CVE-2006-5730

MODX CMS

CVE-2006-5730

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...

EUVD-2006-5715

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...

CVE-2006-5730: Undefined Security Weakness

PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter. NOTE: it is possible that this is a vulnerability in FCKeditor...

MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...

MODx CMS 0.9.2.1 - FCKeditor Remote File Inclusion

MODx CMS 0.9.2.1 - FCKeditor Remote File Inclusion +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------...

MODx CMS 0.9.2.1 (base_path) Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: MODx CMS 0.9.2.1 + Vendor...

MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion

+------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: MODx CMS 0.9.2.1 + Vendor...

MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= MODx CMS include $basepath."manager/media/browser/mcpuk/connectors/php/Command...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

CVE-2006-1821

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

Directory traversal

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

CVE-2006-1820

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

CVE-2006-1820

CVE-2006-1820 affects MODx

CVE-2006-1821

CVE-2006-1821: A directory traversal in ModX 0.9.1’s index.php allows remote reading of arbitrary files via a .. sequence and trailing NULL (%00) in the id parameter. Affected product: ModX 0.9.1. Root cause: inadequate input sanitization in id handling leading to path traversal. Impact per sourc...

CVE-2006-1821

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

[SA19645] MODx Cross-Site Scripting and Directory Traversal

TITLE: MODx Cross-Site Scripting and Directory Traversal SECUNIA ADVISORY ID: SA19645 VERIFY ADVISORY: http://secunia.com/advisories/19645/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: MODx 0.x...

CVE-2006-1820: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...