PT-2014-4893

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.2.14 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the session ID PHPSESSID to index.php. Additionally, remote authenticated users can execute...