719 matches found
MODx manager - Local File Inclusion
A directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl and possibly earlier allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter when magicquotesgpc is disabled. id: CVE-2010-5278 info: name: MODx manag...
MODx manager - Local File Inclusion Detection
A directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl and possibly earlier allows remote attackers to read arbitrary files via a .. dot dot in the classkey parameter when magicquotesgpc is disabled. !/usr/bin/env python3 -- coding: utf-8 -...
ModX CMS - Unfinished Installation Detection
Detected accessible ModX CMS installation or setup pages that indicated an incomplete installation.An exposed installation interface allowed attackers to complete the setup process and gain administrative access. !/usr/bin/env python3 -- coding: utf-8 -- """Detected accessible ModX CMS installati...
📄 MODX 3.2.1 Missing Secure Flag
MODX version 3.2.1 is missing the secure flag setting on its cookie. Titles: MODX.3.2.1 TLS cookie without secure flag set - COOKIE PHPSESSID HIJACK Author: nu11secur1ty Date: 7/7/2026 Vendor: https://modx.com/ Software:...
SUSE CVE-2017-1000067
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges...
CVE-2018-1000208
MODX Revolution version =2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to be exploitable via web request via security/login processor. This vulnerability appears to have been fixed in pull 139...
CVE-2022-26149
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator...
EUVD-2017-1492
Malware in sbrugna...
EUVD-2017-17077
Malware in sbrugna...
EUVD-2018-2455
Malware in sbrugna...
EUVD-2010-1454
Malware in sbrugna...
EUVD-2011-0753
Malware in sbrugna...
EUVD-2017-16349
Malware in sbrugna...
EUVD-2014-2349
Malware in sbrugna...
EUVD-2014-2764
Malware in sbrugna...
EUVD-2016-1232
Malware in sbrugna...
EUVD-2010-4847
Malware in sbrugna...
EUVD-2018-9309
Malware in sbrugna...