Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modx vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2008-5938
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary PHP code via a URL in the reflect_base parameter.
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6.1
1 EDB exploit
7.5
CVSSv2
CVE-2010-1426
SQL injection vulnerability in MODx Evolution prior to 1.0.3 allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to WebLogin.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.6.2
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
7.5
CVSSv2
CVE-2010-3929
SQL injection vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
6
CVSSv2
CVE-2008-5941
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and previous versions allows remote malicious users to perform unauthorized actions as other users via unknown vectors.
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms
6.8
CVSSv2
CVE-2007-5371
Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote malicious users to execute arbitrary SQL commands via the (1) documentDirty or (2) modVariables parameter.
Modxcms Modxcms 0.9.6
7.5
CVSSv2
CVE-2007-0659
download.php in the MuddyDogPaws FileDownload snippet prior to 2.5 for MODx allows remote malicious users to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.
Modxcms Filedownload 2.0
Modxcms Filedownload 1.7
5
CVSSv2
CVE-2010-3930
Directory traversal vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
4.3
CVSSv2
CVE-2011-0741
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution prior to 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
4.3
CVSSv2
CVE-2010-1427
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution prior to 1.0.3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 0.9.2.1
Modxcms Evolution
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
6.8
CVSSv2
CVE-2008-5940
SQL injection vulnerability in index.php in MODx 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000
CVE-2024-4439
unauthorized
CVE-2024-0042
CVE-2024-31848
CVE-2023-40694
cache poisoning
CVE-2024-23707
firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »