CVE-2006-1820

CVE-2006-1820 affects MODx

CVE-2006-1821

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

[SA19645] MODx Cross-Site Scripting and Directory Traversal

TITLE: MODx Cross-Site Scripting and Directory Traversal SECUNIA ADVISORY ID: SA19645 VERIFY ADVISORY: http://secunia.com/advisories/19645/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: MODx 0.x...

MODx < 0.9.1a Multiple Vulnerabilities

The remote host is running MODx, a content management system written in PHP. The version of MODx installed on the remote host fails to sanitize input to the 'id' parameter of the 'index.php' script before using it to generate dynamic HTML output. An unauthenticated attacker can exploit this to...

Vulnerabilities in MODx

k k kkkk kk kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk kk kkkk k k kk k k kkkk k kk k k k =- Vulnerabilities in ModX Author : Rusydi Hasan M a.k.a : cR45H3R Date :...

MODx CMS 0.9.1 - index.php Directory Traversal

MODx CMS 0.9.1 - index.php Directory Traversal source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17532/info MODxCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context...

MODx CMS 0.9.1 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...