Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modx modx revolution 2.5.6 vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2017-1000223
A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and previous versions. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims...
Modx Modx Revolution
8.8
CVSSv3
CVE-2017-1000067
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges.
Modx Revolution 2.5.5
Modx Revolution 2.4.0
Modx Revolution 2.3.0
Modx Revolution 2.2.5
Modx Revolution 2.2.3
Modx Revolution 2.2.1
Modx Revolution 2.1.5
Modx Revolution 2.1.3
Modx Revolution 2.0.0
Modx Revolution 2.5.3
Modx Revolution 2.5.2
Modx Revolution 2.5.1
Modx Revolution 2.5.0
Modx Revolution 2.2.0
Modx Revolution 2.2.9
Modx Revolution 2.2.8
Modx Revolution 2.2.7
Modx Revolution 2.2.6
Modx Revolution 2.1.1
Modx Revolution 2.1.0
Modx Revolution 2.5.6
Modx Revolution 2.5.4
7
CVSSv3
CVE-2017-9067
In MODX Revolution prior to 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.
Modx Modx Revolution 2.5.6
Php Php 5.3.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started