MODx CMS 0.9.2.1 - FCKeditor Remote File Inclusion

MODx CMS 0.9.2.1 - FCKeditor Remote File Inclusion +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------...

MODx CMS 0.9.2.1 (base_path) Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: MODx CMS 0.9.2.1 + Vendor...

Directory traversal

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

CVE-2006-1820

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

CVE-2006-1821

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

CVE-2006-1820

CVE-2006-1820 affects MODx

CVE-2006-1821

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

CVE-2006-1821

CVE-2006-1821: A directory traversal in ModX 0.9.1’s index.php allows remote reading of arbitrary files via a .. sequence and trailing NULL (%00) in the id parameter. Affected product: ModX 0.9.1. Root cause: inadequate input sanitization in id handling leading to path traversal. Impact per sourc...

[SA19645] MODx Cross-Site Scripting and Directory Traversal

TITLE: MODx Cross-Site Scripting and Directory Traversal SECUNIA ADVISORY ID: SA19645 VERIFY ADVISORY: http://secunia.com/advisories/19645/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: MODx 0.x...

CVE-2006-1821: Undefined Security Weakness

Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the id parameter...

CVE-2006-1820: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...

MODx < 0.9.1a Multiple Vulnerabilities

The remote host is running MODx, a content management system written in PHP. The version of MODx installed on the remote host fails to sanitize input to the 'id' parameter of the 'index.php' script before using it to generate dynamic HTML output. An unauthenticated attacker can exploit this to...

Vulnerabilities in MODx

k k kkkk kk kkkk k k kkkkkk kkkkkk kkkk k k k k k k k k k k k k k k kk k k k k kk k k k k kk kkkkk k kkkkk kk kk kkkkkk k k k k k k kk k k k k k k k kk k k k k k k k k k k k k kkkk kk kkkk k k kk k k kkkk k kk k k k =- Vulnerabilities in ModX Author : Rusydi Hasan M a.k.a : cR45H3R Date :...

MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17532/info MODxCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context...

MODx CMS 0.9.1 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...

MODx CMS 0.9.1 - index.php Directory Traversal

MODx CMS 0.9.1 - index.php Directory Traversal source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...