MODX Revolution 2.5.6 SQL Injection

MODX Revolution 2.0.1-pl - 2.5.6-pl blind SQLi Information =========== Name: MODX Revolution 2.0.1 - 2.5.6 based on git commit Software: MODX CMS Homepage: https://modx.com Vulnerability: blind SQL injection Prerequisites: attacker needs to be authenticated and with correct permissions Severity:...

modx cms <= 0.9.6.2 (rfi/xss) Multiple Vulnerabilities

No description provided by source. :: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor:...

MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...

MODx Blind SQL Injection Vulnerability

MODx versions prior to 2.2.14 suffer from multiple remote blind SQL injection vulnerabilities. Product description: ============ MODX originally MODx is a free, open source content management system and web application framework for publishing content on the world wide web and intranets...

MODX CMS < 2.3.0 XSS Vulnerability - Active Check

MODX CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CSRF, AoF, DoS and IAA vulnerabilities in MODx

Hello 3APA3A! I want to warn you about new security vulnerabilities in MODx. This is the second part of the vulnerabilities in this CMS 6 vulnerabilities to previous 19 vulnerabilities. These are Cross-Site Request Forgery, Abuse of Functionality, Denial of Service and Insufficient Anti-automatio...

MODx 1.0.6 XSS / Abuse Functionality / Denial Of Service

Hello list! I want to warn you about new security vulnerabilities in MODx. This is the second part of the vulnerabilities in this CMS 6 vulnerabilities to previous 19 vulnerabilities. These are Cross-Site Request Forgery, Abuse of Functionality, Denial of Service and Insufficient Anti-automation...

JW Player / SVFP / Poodll / RokBox Cross Site Scripting

Hello list! Earlier I've wrote about Content Spoofing and Cross-Site Scripting vulnerabilities in JW Player http://securityvulns.com/docs28176.html. And I've mentioned that there are near million of web sites with vulnerable flash-file - it's only indexed by Google, and in reality there are much...

Vulnerabilities in plugins for MODx CMS, XOOPS, uCoz, Magento and DSP CMS

Hello 3APA3A! Besides tens millions of vulnerable web sites with affected flash files and vulnerable multiple plugins for different engines, which I've wrote about earlier, there are a lot of other vulnerable plugins. Here are new ones some of them are vulnerable to two XSS holes. There are...

MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities

Document Title: =============== MODx CMS v1.0.x - Multiple Cross Site Vulnerabilities Release Date: ============= 2011-08-02 Vulnerability Laboratory ID VL-ID: ==================================== 125 Product & Service Introduction: =============================== MODx helps you take control of...

JVN#95385972: MODx Evolution vulnerable to directory traversal

MODx provided by the MODx CMS Project is a Content Management System CMS software. MODx contains a directory traversal vulnerability. Impact A remote attacker may access or view arbitrary files on the server. Solution Update the software Update to the latest version according to the information...

MODx CMS 1.0.3 SQL Injection

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

SQL injection vulnerability in MODx CMS

Vulnerability ID: HTB22414 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcms.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: N...

SQL injection vulnerability in MODx CMS and Application Framework

Vulnerability ID: HTB22413 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework1.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...

SQL injection vulnerability in MODx CMS and Application Framework

Vulnerability ID: HTB22412 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinmodxcmsandapplicationframework.html Product: MODx CMS and Application Framework Vendor: MODx Vulnerable Version: 1.0.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type:...

CVE-2008-7243

Cross-site request forgery CSRF vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the 1 search, 2 "a," 3 messagesubject, and 4 messagebody parameters to certain pages as reachable from manager/index.php; 5 highlight, 6 id, 7 email...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to...

CVE-2008-7242

Multiple cross-site scripting XSS vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the 1 search, 2 "a," 3 messagesubject, and 4 messagebody parameters to certain pages as reachable from manager/index.php; 5 highlight, 6 id, 7 email...

CVE-2008-7243

MODx CMS 0.9.6.1 and 0.9.6.1p1 are affected by a CSRF vulnerability (CVE-2008-7243) that allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. Technical details are limited in the provided documents; the description specifies...