Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modxcms modxcms vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2019-1010178
Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is: assets/components/fred/web/elfinder/connector.php. The attack vector is: Uploading a PHP file or change data in the database. The fixe...
Modx Fred 1.0.0
NA
CVE-2010-3929
SQL injection vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
NA
CVE-2010-3930
Directory traversal vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
NA
CVE-2011-0741
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution prior to 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
NA
CVE-2010-1426
SQL injection vulnerability in MODx Evolution prior to 1.0.3 allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to WebLogin.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.6.2
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
NA
CVE-2010-1427
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution prior to 1.0.3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 0.9.2.1
Modxcms Evolution
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
NA
CVE-2008-7242
Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote malicious users to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from ma...
Modxcms Modxcms 0.9.6.1
1 EDB exploit
NA
CVE-2008-7243
Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote malicious users to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear wheth...
Modxcms Modxcms 0.9.6.1
NA
CVE-2008-5941
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and previous versions allows remote malicious users to perform unauthorized actions as other users via unknown vectors.
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms
NA
CVE-2008-5938
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary PHP code via a URL in the reflect_base parameter.
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6.1
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »