717 matches found
MODX <= 2.0.2 Multiple Vulnerabilities - Active Check
MODX is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
MODx Revolution 2.0.2-pl Cross Site Request Forgery
img...
MODx Revolution 2.0.2-pl Cross Site Scripting
------------------------------------------------------------------------ Software................MODx Revolution 2.0.2-pl Vulnerability...........Reflected Cross-site Scripting Download................http://modxcms.com Release Date............9/28/2010 Tested On...............Windows Vista + XAM...
MODx Revolution 2.0.2-pl Local File Inclusion
------------------------------------------------------------------------ Software................MODx Revolution 2.0.2-pl Vulnerability...........Local File Inclusion Download................http://modxcms.com Release Date............9/28/2010 Tested On...............Windows Vista + XAMPP...
MODx 2.0.2-pl - managerindex.php?modahsh Cross-Site Scripting
MODx 2.0.2-pl - managerindex.php?modahsh Cross-Site Scripting source: https://www.securityfocus.com/bid/43577/info MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...
MODx manager - controllersdefaultresourcetvs.php?class_key Traversal Local File Inclusion
MODx manager - controllersdefaultresourcetvs.php?classkey Traversal Local File Inclusion source: https://www.securityfocus.com/bid/43577/info MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...
MODx 2.0.2-pl - '/manager/index.php?modahsh' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43577/info MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strin...
MODx manager - '/controllers/default/resource/tvs.php?class_key' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/43577/info MODx is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strin...
MODx CMF 1.0.3 / 1.0.4 Cross Site Scripting
Title: MODx Installation File XSS Vulnerability Vendor: MODx Product: MODx CMF Tested Versions: 1.0.3, 1.0.4 Threat Class: XSS Severity: Medium Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== MODx CMF is prone to a XSS vulnerability caused by unsanitized user inp...
MODx Installation File XSS Vulnerability
Title: MODx Installation File XSS Vulnerability Vendor: MODx Product: MODx CMF Tested Versions: 1.0.3, 1.0.4 Threat Class: XSS Severity: Medium Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== MODx CMF is prone to a XSS vulnerability caused by unsanitized user inp...
MODx CMS 1.0.3 SQL Injection
Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...
MODx 1.0.3 - index.php Multiple SQL Injections
MODx 1.0.3 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...
SQL injection vulnerability in MODx CMS and Application Framework
Vulnerability ID: HTB22412 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...
SQL injection vulnerability in MODx CMS and Application Framework
Vulnerability ID: HTB22413 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework1.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...
SQL injection vulnerability in MODx CMS
Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...
MODx 1.0.3 - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...
MODx < 1.0.3 Multiple Vulnerabilities
Binary data 5522.prm...
MODx SearchHighlight plugin XSS
The version of MODx hosted on the remote web server fails to properly sanitize user-supplied input to the 'highlight' parameter of the 'SearchHighlight' plugin. An attacker, exploiting this flaw, could inject arbitrary HTML and script code in a user's browser to be executed within the security...
MODx CMS Detection
The remote host is running MODx, an open source content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46182; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"MODx CMS...
