Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

modxcms modxcms vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2010-1426
SQL injection vulnerability in MODx Evolution prior to 1.0.3 allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to WebLogin.
Modxcms Modxcms 0.9.6.1Modxcms Modxcms 0.9.2.1Modxcms Modxcms 0.9.6.2Modxcms Modxcms 0.9.0Modxcms Modxcms 0.9.6Modxcms Modxcms 0.9.1Modxcms ModxcmsModxcms Modxcms 0.9.5
6.8
CVSSv2
CVE-2008-5938
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary PHP code via a URL in the reflect_base parameter.
Modxcms Modxcms 0.9.6Modxcms Modxcms 0.9.2.1Modxcms Modxcms 0.9.1Modxcms ModxcmsModxcms Modxcms 0.9.5Modxcms Modxcms 0.9.0Modxcms Modxcms 0.9.6.1
4.3
CVSSv2
CVE-2008-5939
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php. NOTE: some sources list the id...
Modxcms Modxcms 0.9.6.1Modxcms Modxcms 0.9.0Modxcms ModxcmsModxcms Modxcms 0.9.5Modxcms Modxcms 0.9.6Modxcms Modxcms 0.9.2.1Modxcms Modxcms 0.9.1
6.8
CVSSv2
CVE-2008-5940
SQL injection vulnerability in index.php in MODx 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information.
Modxcms Modxcms 0.9.6.1Modxcms Modxcms 0.9.5Modxcms Modxcms 0.9.0Modxcms Modxcms 0.9.6Modxcms Modxcms 0.9.2.1Modxcms Modxcms 0.9.1Modxcms Modxcms
4.3
CVSSv2
CVE-2008-5942
Multiple cross-site scripting (XSS) vulnerabilities in MODx prior to 0.9.6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939...
Modxcms Modxcms 0.9.5Modxcms Modxcms 0.9.0Modxcms Modxcms 0.9.6.1Modxcms Modxcms 0.9.6Modxcms Modxcms 0.9.2.1Modxcms Modxcms 0.9.1Modxcms Modxcms
6
CVSSv2
CVE-2008-5941
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and previous versions allows remote malicious users to perform unauthorized actions as other users via unknown vectors.
Modxcms Modxcms 0.9.2.1Modxcms Modxcms 0.9.1Modxcms Modxcms 0.9.5Modxcms Modxcms 0.9.0Modxcms Modxcms 0.9.6Modxcms Modxcms
5.1
CVSSv2
CVE-2006-5730
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this ...
Modxcms Modxcms 0.9.1Modxcms Modxcms
4.3
CVSSv2
CVE-2011-0741
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution prior to 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Modxcms Evolution 0.9.6.1Modxcms Evolution 1.0.2Modxcms Evolution 0.9.2.1Modxcms Evolution 0.9.5Modxcms Evolution 0.9.0Modxcms Evolution 1.0.3Modxcms Evolution 0.9.1Modxcms Evolution 0.9.6Modxcms Evolution 0.9.6.2Modxcms Evolution
7.5
CVSSv2
CVE-2010-3929
SQL injection vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1Modxcms Evolution 1.0.2Modxcms Evolution 0.9.2.1Modxcms Evolution 0.9.5Modxcms Evolution 0.9.0Modxcms Evolution 1.0.3Modxcms Evolution 0.9.1Modxcms Evolution 0.9.6Modxcms Evolution 0.9.6.2Modxcms Evolution
5
CVSSv2
CVE-2010-3930
Directory traversal vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Modxcms Evolution 0.9.6.1Modxcms Evolution 1.0.2Modxcms Evolution 0.9.2.1Modxcms Evolution 0.9.5Modxcms Evolution 0.9.0Modxcms Evolution 1.0.3Modxcms Evolution 0.9.1Modxcms Evolution 0.9.6Modxcms Evolution 0.9.6.2Modxcms Evolution
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook