Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

modx modx revolution 2.0.4 vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2014-2080
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution prior to 2.2.11 allows remote malicious users to inject arbitrary web script or HTML via the "a" parameter.
Modx Modx RevolutionModx Modx Revolution 2.1.2Modx Modx Revolution 2.1.1Modx Modx Revolution 2.1.0Modx Modx Revolution 2.0.8Modx Modx Revolution 2.2.4Modx Modx Revolution 2.2.3Modx Modx Revolution 2.2.2Modx Modx Revolution 2.2.1Modx Modx Revolution 2.0.3Modx Modx Revolution 2.0.2Modx Modx Revolution 2.0.1Modx Modx Revolution 2.0.0Modx Modx Revolution 2.2.9Modx Modx Revolution 2.2.7Modx Modx Revolution 2.2.5Modx Modx Revolution 2.2.0Modx Modx Revolution 2.1.4Modx Modx Revolution 2.0.6Modx Modx Revolution 2.0.4Modx Modx Revolution 2.2.8Modx Modx Revolution 2.2.6
668
VMScore
CVE-2014-2736
Multiple SQL injection vulnerabilities in MODX Revolution prior to 2.2.14 allow remote malicious users to execute arbitrary SQL commands via the (1) session ID (PHPSESSID) to index.php or remote authenticated users to execute arbitrary SQL commands via the (2) user parameter to c...
Modx Modx Revolution 2.0.0Modx Modx Revolution 2.1.5Modx Modx Revolution 2.2.0Modx Modx Revolution 2.2.1Modx Modx Revolution 2.2.10Modx Modx Revolution 2.0.5Modx Modx Revolution 2.0.6Modx Modx Revolution 2.0.7Modx Modx Revolution 2.0.8Modx Modx Revolution 2.1.0Modx Modx Revolution 2.2.3Modx Modx Revolution 2.2.4Modx Modx Revolution 2.2.5Modx Modx Revolution 2.2.6Modx Modx Revolution 2.0.4Modx Modx Revolution 2.1.2Modx Modx Revolution 2.1.4Modx Modx Revolution 2.2.11Modx Modx RevolutionModx Modx Revolution 2.2.8Modx Modx Revolution 2.0.1Modx Modx Revolution 2.0.3
668
VMScore
CVE-2014-2311
SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 prior to 2.2.13 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Modx Modx Revolution 2.0.1Modx Modx Revolution 2.0.3Modx Modx Revolution 2.0.4Modx Modx Revolution 2.2.10Modx Modx Revolution 2.2.11Modx Modx Revolution 2.2.2Modx Modx Revolution 2.2.3Modx Modx Revolution 2.2.4Modx Modx Revolution 2.2.12Modx Modx Revolution 2.0.6Modx Modx Revolution 2.0.8Modx Modx Revolution 2.1.4Modx Modx Revolution 2.2.0Modx Modx Revolution 2.2.5Modx Modx Revolution 2.2.7Modx Modx Revolution 2.0.0Modx Modx Revolution 2.0.5Modx Modx Revolution 2.0.7Modx Modx Revolution 2.1.5Modx Modx Revolution 2.2.1Modx Modx Revolution 2.2.6Modx Modx Revolution 2.2.8
685
VMScore
CVE-2014-8773
MODX Revolution 2.x prior to 2.2.15 allows remote malicious users to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.
Modx Modx Revolution 2.1.2Modx Modx Revolution 2.1.3Modx Modx Revolution 2.1.4Modx Modx Revolution 2.1.5Modx Modx Revolution 2.2.8Modx Modx Revolution 2.2.9Modx Modx Revolution 2.0.0Modx Modx Revolution 2.0.7Modx Modx Revolution 2.1.0Modx Modx Revolution 2.2.1Modx Modx Revolution 2.2.11Modx Modx Revolution 2.2.5Modx Modx Revolution 2.2.7Modx Modx Revolution 2.0.1Modx Modx Revolution 2.0.8Modx Modx Revolution 2.1.1Modx Modx Revolution 2.2.0Modx Modx Revolution 2.2.10Modx Modx Revolution 2.2.4Modx Modx Revolution 2.2.6Modx Modx Revolution 2.0.3Modx Modx Revolution 2.0.4
435
VMScore
CVE-2014-8774
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x prior to 2.2.15 allows remote malicious users to inject arbitrary web script or HTML via the context_key parameter.
Modx Modx Revolution 2.1.0Modx Modx Revolution 2.1.1Modx Modx Revolution 2.1.2Modx Modx Revolution 2.1.3Modx Modx Revolution 2.2.6Modx Modx Revolution 2.2.7Modx Modx Revolution 2.2.8Modx Modx Revolution 2.2.9Modx Modx Revolution 2.0.6Modx Modx Revolution 2.0.8Modx Modx Revolution 2.1.4Modx Modx Revolution 2.2.0Modx Modx Revolution 2.2.10Modx Modx Revolution 2.2.2Modx Modx Revolution 2.2.4Modx Modx Revolution 2.0.0Modx Modx Revolution 2.0.5Modx Modx Revolution 2.0.7Modx Modx Revolution 2.1.5Modx Modx Revolution 2.2.1Modx Modx Revolution 2.2.3Modx Modx Revolution 2.2.5
505
VMScore
CVE-2014-8775
MODX Revolution 2.x prior to 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie.
Modx Modx Revolution 2.1.3Modx Modx Revolution 2.1.4Modx Modx Revolution 2.1.5Modx Modx Revolution 2.2.0Modx Modx Revolution 2.2.8Modx Modx Revolution 2.2.9Modx Modx Revolution 2.0.0Modx Modx Revolution 2.0.7Modx Modx Revolution 2.1.0Modx Modx Revolution 2.1.2Modx Modx Revolution 2.2.1Modx Modx Revolution 2.2.11Modx Modx Revolution 2.2.5Modx Modx Revolution 2.2.7Modx Modx Revolution 2.0.1Modx Modx Revolution 2.0.8Modx Modx Revolution 2.1.1Modx Modx Revolution 2.2.10Modx Modx Revolution 2.2.12Modx Modx Revolution 2.2.4Modx Modx Revolution 2.2.6Modx Modx Revolution 2.0.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook