Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modx modx revolution vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2014-8992
Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote malicious users to inject arbitrary web script or HTML via the callback parameter.
Modx Modx Revolution 2.3.2
685
VMScore
CVE-2014-8773
MODX Revolution 2.x prior to 2.2.15 allows remote malicious users to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.
Modx Modx Revolution 2.1.2
Modx Modx Revolution 2.1.3
Modx Modx Revolution 2.1.4
Modx Modx Revolution 2.1.5
Modx Modx Revolution 2.2.8
Modx Modx Revolution 2.2.9
Modx Modx Revolution 2.0.0
Modx Modx Revolution 2.0.7
Modx Modx Revolution 2.1.0
Modx Modx Revolution 2.2.1
Modx Modx Revolution 2.2.11
Modx Modx Revolution 2.2.5
Modx Modx Revolution 2.2.7
Modx Modx Revolution 2.0.1
Modx Modx Revolution 2.0.8
Modx Modx Revolution 2.1.1
Modx Modx Revolution 2.2.0
Modx Modx Revolution 2.2.10
Modx Modx Revolution 2.2.4
Modx Modx Revolution 2.2.6
Modx Modx Revolution 2.0.3
Modx Modx Revolution 2.0.4
1 EDB exploit
435
VMScore
CVE-2014-8774
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x prior to 2.2.15 allows remote malicious users to inject arbitrary web script or HTML via the context_key parameter.
Modx Modx Revolution 2.1.0
Modx Modx Revolution 2.1.1
Modx Modx Revolution 2.1.2
Modx Modx Revolution 2.1.3
Modx Modx Revolution 2.2.6
Modx Modx Revolution 2.2.7
Modx Modx Revolution 2.2.8
Modx Modx Revolution 2.2.9
Modx Modx Revolution 2.0.6
Modx Modx Revolution 2.0.8
Modx Modx Revolution 2.1.4
Modx Modx Revolution 2.2.0
Modx Modx Revolution 2.2.10
Modx Modx Revolution 2.2.2
Modx Modx Revolution 2.2.4
Modx Modx Revolution 2.0.0
Modx Modx Revolution 2.0.5
Modx Modx Revolution 2.0.7
Modx Modx Revolution 2.1.5
Modx Modx Revolution 2.2.1
Modx Modx Revolution 2.2.3
Modx Modx Revolution 2.2.5
1 EDB exploit
505
VMScore
CVE-2014-8775
MODX Revolution 2.x prior to 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote malicious users to obtain potentially sensitive information via script access to this cookie.
Modx Modx Revolution 2.1.3
Modx Modx Revolution 2.1.4
Modx Modx Revolution 2.1.5
Modx Modx Revolution 2.2.0
Modx Modx Revolution 2.2.8
Modx Modx Revolution 2.2.9
Modx Modx Revolution 2.0.0
Modx Modx Revolution 2.0.7
Modx Modx Revolution 2.1.0
Modx Modx Revolution 2.1.2
Modx Modx Revolution 2.2.1
Modx Modx Revolution 2.2.11
Modx Modx Revolution 2.2.5
Modx Modx Revolution 2.2.7
Modx Modx Revolution 2.0.1
Modx Modx Revolution 2.0.8
Modx Modx Revolution 2.1.1
Modx Modx Revolution 2.2.10
Modx Modx Revolution 2.2.12
Modx Modx Revolution 2.2.4
Modx Modx Revolution 2.2.6
Modx Modx Revolution 2.0.3
1 EDB exploit
383
VMScore
CVE-2014-5451
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl and previous versions allows remote malicious users to inject arbitrary web script or HTML via the "a" parameter to manager/. NOTE: this issue exists because of ...
Modx Modx Revolution
668
VMScore
CVE-2014-2736
Multiple SQL injection vulnerabilities in MODX Revolution prior to 2.2.14 allow remote malicious users to execute arbitrary SQL commands via the (1) session ID (PHPSESSID) to index.php or remote authenticated users to execute arbitrary SQL commands via the (2) user parameter to c...
Modx Modx Revolution 2.0.0
Modx Modx Revolution 2.1.5
Modx Modx Revolution 2.2.0
Modx Modx Revolution 2.2.1
Modx Modx Revolution 2.2.10
Modx Modx Revolution 2.0.5
Modx Modx Revolution 2.0.6
Modx Modx Revolution 2.0.7
Modx Modx Revolution 2.0.8
Modx Modx Revolution 2.1.0
Modx Modx Revolution 2.2.3
Modx Modx Revolution 2.2.4
Modx Modx Revolution 2.2.5
Modx Modx Revolution 2.2.6
Modx Modx Revolution 2.0.4
Modx Modx Revolution 2.1.2
Modx Modx Revolution 2.1.4
Modx Modx Revolution 2.2.11
Modx Modx Revolution
Modx Modx Revolution 2.2.8
Modx Modx Revolution 2.0.1
Modx Modx Revolution 2.0.3
668
VMScore
CVE-2014-2311
SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 prior to 2.2.13 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Modx Modx Revolution 2.0.1
Modx Modx Revolution 2.0.3
Modx Modx Revolution 2.0.4
Modx Modx Revolution 2.2.10
Modx Modx Revolution 2.2.11
Modx Modx Revolution 2.2.2
Modx Modx Revolution 2.2.3
Modx Modx Revolution 2.2.4
Modx Modx Revolution 2.2.12
Modx Modx Revolution 2.0.6
Modx Modx Revolution 2.0.8
Modx Modx Revolution 2.1.4
Modx Modx Revolution 2.2.0
Modx Modx Revolution 2.2.5
Modx Modx Revolution 2.2.7
Modx Modx Revolution 2.0.0
Modx Modx Revolution 2.0.5
Modx Modx Revolution 2.0.7
Modx Modx Revolution 2.1.5
Modx Modx Revolution 2.2.1
Modx Modx Revolution 2.2.6
Modx Modx Revolution 2.2.8
383
VMScore
CVE-2014-2080
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution prior to 2.2.11 allows remote malicious users to inject arbitrary web script or HTML via the "a" parameter.
Modx Modx Revolution
Modx Modx Revolution 2.1.2
Modx Modx Revolution 2.1.1
Modx Modx Revolution 2.1.0
Modx Modx Revolution 2.0.8
Modx Modx Revolution 2.2.4
Modx Modx Revolution 2.2.3
Modx Modx Revolution 2.2.2
Modx Modx Revolution 2.2.1
Modx Modx Revolution 2.0.3
Modx Modx Revolution 2.0.2
Modx Modx Revolution 2.0.1
Modx Modx Revolution 2.0.0
Modx Modx Revolution 2.2.9
Modx Modx Revolution 2.2.7
Modx Modx Revolution 2.2.5
Modx Modx Revolution 2.2.0
Modx Modx Revolution 2.1.4
Modx Modx Revolution 2.0.6
Modx Modx Revolution 2.0.4
Modx Modx Revolution 2.2.8
Modx Modx Revolution 2.2.6
435
VMScore
CVE-2010-5278
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote malicious users to read arbitrary files via a .. (dot dot) in the class_key parameter. NOTE: some ...
Modx Modx Revolution
1 EDB exploit
265
VMScore
CVE-2010-4883
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote malicious users to inject arbitrary web script or HTML via the modhash parameter.
Modx Revolution 2.0.2-pl
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4