MODx 1.0.3 - index.php Multiple SQL Injections

MODx 1.0.3 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...

SQL injection vulnerability in MODx CMS and Application Framework

Vulnerability ID: HTB22413 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework1.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...

SQL injection vulnerability in MODx CMS and Application Framework

Vulnerability ID: HTB22412 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

MODx 1.0.3 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

MODx < 1.0.3 Multiple Vulnerabilities

Binary data 5522.prm...

MODx SearchHighlight plugin XSS

The version of MODx hosted on the remote web server fails to properly sanitize user-supplied input to the 'highlight' parameter of the 'SearchHighlight' plugin. An attacker, exploiting this flaw, could inject arbitrary HTML and script code in a user's browser to be executed within the security...

MODx CMS Detection

The remote host is running MODx, an open source content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46182; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"MODx CMS...

CVE-2010-1426

SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors related to WebLogin...

CVE-2010-1427

Cross-site scripting XSS vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch...

Sql injection

SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors related to WebLogin...

Cross site scripting

Cross-site scripting XSS vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch...

CVE-2010-1426

MODx Evolution prior to 1.0.3 contains an SQL injection vulnerability related to WebLogin that could allow a remote attacker to view or modify information by executing arbitrary SQL commands. The issue is documented across multiple sources (NVD, JVN/JVM entries, and Nessus plugin 5522) with the s...

CVE-2010-1427

Cross-site scripting XSS vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch...

CVE-2010-1426

SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors related to WebLogin...

CVE-2010-1427

CVE-2010-1427 is an XSS vulnerability in the MODx Evolution project, specifically affecting the SearchHighlight plugin prior to version 1.0.3. It allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch. The NVD entry lists a CVSS v2 base score of 4...

CVE-2010-1426: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors related to WebLogin...

CVE-2010-1427: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch...

MODx vulnerable to SQL injection

Overview MODx provided by The MODx CMS Project contains a SQL injection vulnerability. MODx provided by the MODx CMS Project is a Contents Management System CMS software. MODx contains a SQL injection vulnerability. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerabili...

JVN#19774883 MODx vulnerable to SQL injection

MODx provided by the MODx CMS Project is a Contents Management System CMS software. MODx contains a SQL injection vulnerability. Impact A remote attacker may view or modify information stored by the product. Solution Update the Software Update to the latest version according to the information...