Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modxcms modxcms 0.9.6.1 vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2008-5938
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary PHP code via a URL in the reflect_base parameter.
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6.1
1 EDB exploit
4.3
CVSSv2
CVE-2008-5939
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php. NOTE: some sources list the id...
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.0
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
1 EDB exploit
6.8
CVSSv2
CVE-2008-5940
SQL injection vulnerability in index.php in MODx 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
4.3
CVSSv2
CVE-2008-5942
Multiple cross-site scripting (XSS) vulnerabilities in MODx prior to 0.9.6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939...
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
6.4
CVSSv2
CVE-2008-0094
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote malicious users to (1) include and execute arbitrary local files via a .. (dot dot) in the as_language parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index...
Modxcms Modxcms 0.9.6.1
2 EDB exploits
4.3
CVSSv2
CVE-2008-7242
Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote malicious users to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from ma...
Modxcms Modxcms 0.9.6.1
1 EDB exploit
6.8
CVSSv2
CVE-2008-7243
Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote malicious users to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear wheth...
Modxcms Modxcms 0.9.6.1
7.5
CVSSv2
CVE-2010-1426
SQL injection vulnerability in MODx Evolution prior to 1.0.3 allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to WebLogin.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.6.2
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
4.3
CVSSv2
CVE-2010-1427
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution prior to 1.0.3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 0.9.2.1
Modxcms Evolution
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
4.3
CVSSv2
CVE-2011-0741
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution prior to 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race condition
CVE-2024-4249
CVE-2024-4244
CVE-2023-20198
TCP
CVE-2022-48648
CVE-2022-48636
CVE-2024-21345
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »