588 matches found
CVE-2008-5939
MODx CMS before 0.9.6.3 is affected by XSS in index.php (and related to username input) allowing remote attackers to inject arbitrary script/HTML. CVE-2008-5942 also notes vectors tied to the preserveUrls function. The original disclosure indicates the id parameter is unlikely affected. Remediati...
CVE-2008-5938
The vulnerability CVE-2008-5938 affects MODx CMS ≤ 0.9.6.2, where PHP remote file inclusion is possible through assets/snippets/reflect/snippet.reflect.php via the reflect_base parameter when magic_quotes_gpc is disabled. This could allow an attacker to execute arbitrary PHP code on the server. C...
CVE-2008-5942
Multiple cross-site scripting XSS vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the preserveUrls function and 2 "username input." NOTE: vector 2 may be related to CVE-2008-5939...
CVE-2008-5942
MODx CMS prior to 0.9.6.3 has two XSS vectors: (1) preserveUrls and (2) username input. The CVE-2008-5942 entry documents multiple XSS vulnerabilities that allow remote attackers to inject arbitrary scripts/HTML. The issues are tied to MODx before 0.9.6.3; remediation is to upgrade to a fixed ver...
MODx cross-site request forgery vulnerability
Overview MODx, an open source contents management system, contains a cross-site request forgery vulnerability. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
MODx cross-site scripting vulnerability
Overview MODx, an open source contents management system, contains a cross-site scripting vulnerability. MODx, an open source contents management system, contains multiple cross-site scripting vulnerabilities. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to...
JVN#66828183 MODx cross-site request forgery vulnerability
MODx, an open source contents management system, contains a cross-site request forgery vulnerability. Impact A remote attacker may modify contents managed by MODx if the user views a malicious web page while logged in to MODx. Solution Update the software and change the configuration Apply the...
JVN#72630020 MODx vulnerable to SQL injection
MODx, an open source contents management system, contains a SQL injection vulnerability in the MODx Control Panel. Impact A remote attacker could obtain administrative privileges of MODx. Solution Update the Software Apply the latest update provided by the developer. Products Affected MODx 0.9.6....
JVN#10170564 MODx cross-site scripting vulnerability
MODx, an open source contents management system, contains multiple cross-site scripting vulnerabilities. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. Products Affected MODx 0.9.6.2 and earlier...
MODx CMS <= 0.9.6.2 (RFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= MODx CMS = 0.9.6.2 RFI/XSS Multiple Remote Vulnerabilities ============================================================= :: The Codes Like A Game Anyone Can Play With It,s ::...
MODx CMS <= 0.9.6.2 (RFI/XSS) Multiple Remote Vulnerabilities
No description provided by source. :: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor:...
MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting
:: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.6.2.tar.gz&utmsource=0961p2&utmmedium=web&utmcampaign=download Discover by :...
MODx CMS 0.9.6.2 - Remote File Inclusion Cross-Site Scripting
MODx CMS 0.9.6.2 - Remote File Inclusion Cross-Site Scripting :: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor:...
MODX CMS < 0.9.2.2 RFI Vulnerability - Active Check
MODX CMS is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MODx cross-site scripting vulnerability
Overview MODxl, an open source content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution None...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. MODx CMS: index.php crossite scripting through email parameter...
Vulnerability in MODx CMS
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в MODx CMS. Уязвимость в скрипте index.php в параметре email. XSS: http://site/index.php?operation=subscribe&id=39&email=3CBODY20onload=alertdocument.cookie3E Уязвима прошлогодняя версия MODx CMS и вполне возможно,...
DSECRG-08-013.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...
MODx 0.9.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/27672/info MODx is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...
[DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities
Digital Security Research Group DSecRG Advisory DSECRG-08-013 Application: MODx CMS Versions Affected: 0.9.6.1, 0.9.6.1p1 Vendor URL: http://modxcms.com/ Bugs: XSS, SiXSS, stored XSS, Change User Password XSRF Vulnerability. Exploits: YES Reported: 11.01.2008 Vendor response: 11.01.2008 Updated...