588 matches found
MODx 0.9.6 - index.php Multiple Cross-Site Scripting Vulnerabilities
MODx 0.9.6 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27672/info MODx is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Directory traversal
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and 2 read...
CVE-2008-0094
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and 2 read...
CVE-2008-0094
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and 2 read...
CVE-2008-0094
MODx Content Management System 0.9.6.1 is affected by CVE-2008-0094 due to directory traversal flaws. Two vulnerable paths are described: Arbitrary local file inclusion/execution via .. in the as_language parameter to assets/snippets/AjaxSearch/AjaxSearch.php (reached via index-ajax.php). Arbitra...
MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser...
MODx CMS 0.9.6.1 - Multiple Vulnerabilities
MODx CMS 0.9.6.1 - Multiple Vulnerabilities WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with...
MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================ MODx CMS 0.9.6.1 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com...
MODx CMS 0.9.6.1 - Multiple Vulnerabilities
WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: quote...
MODx 0.9.6.1 - AjaxSearch.php Local File Inclusion
MODx 0.9.6.1 - AjaxSearch.php Local File Inclusion source: https://www.securityfocus.com/bid/27097/info MODx is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to...
MODx 0.9.6.1 - htcmime.php Source Code Information Disclosure
MODx 0.9.6.1 - htcmime.php Source Code Information Disclosure source: https://www.securityfocus.com/bid/27096/info MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input. An attacker can exploit this...
MODx CMS Source code disclosure, local file inclusion
WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: quote...
MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure
source: https://www.securityfocus.com/bid/27096/info MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...
modxcms-lfi.txt
WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: quote...
MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion
source: https://www.securityfocus.com/bid/27097/info MODx is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the...
Sql injection
Multiple SQL injection vulnerabilities in mutatecontent.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands via the 1 documentDirty or 2 modVariables parameter...
CVE-2007-5371
Multiple SQL injection vulnerabilities in mutatecontent.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands via the 1 documentDirty or 2 modVariables parameter...
CVE-2007-5371
CVE-2007-5371 involves multiple SQL injection vulnerabilities in mutate_content.dynamic.php of MODx 0.9.6. The affected component is mutate_content.dynamic.php, enabling remote attackers to craft inputs via the documentDirty or modVariables parameters to execute arbitrary SQL commands on the data...
CVE-2007-5371
Multiple SQL injection vulnerabilities in mutatecontent.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands via the 1 documentDirty or 2 modVariables parameter...
Vulnerabilities
New Advisory: modx-0.9.6 http://www.dear-pets.com ——————–Summary—————- Software: modx-0.9.6 Sowtware’s Web Site: http://www.modxcms.com Versions: 0.9.6 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: Not Available...