PT-2017-17668

Name of the Vulnerable Software and Affected Versions MODX Revolution versions 2.5.4-pl and earlier Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the core path parameter in the setup/templates/findcore.php file. Recommendations For MODX Revoluti...

CVE-2017-7324: Improper Control of Generation of Code

setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the corepath parameter...