Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modx vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-5939
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php. NOTE: some sources list the id...
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.0
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
1 EDB exploit
NA
CVE-2010-1426
SQL injection vulnerability in MODx Evolution prior to 1.0.3 allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to WebLogin.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.6.2
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
NA
CVE-2010-3929
SQL injection vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
NA
CVE-2008-5941
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and previous versions allows remote malicious users to perform unauthorized actions as other users via unknown vectors.
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms
NA
CVE-2007-5371
Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote malicious users to execute arbitrary SQL commands via the (1) documentDirty or (2) modVariables parameter.
Modxcms Modxcms 0.9.6
NA
CVE-2007-0659
download.php in the MuddyDogPaws FileDownload snippet prior to 2.5 for MODx allows remote malicious users to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.
Modxcms Filedownload 2.0
Modxcms Filedownload 1.7
NA
CVE-2011-0741
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution prior to 1.0.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
NA
CVE-2010-3930
Directory traversal vulnerability in MODx Evolution 1.0.4 and previous versions allows remote malicious users to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 1.0.2
Modxcms Evolution 0.9.2.1
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 1.0.3
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
Modxcms Evolution
NA
CVE-2010-1427
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution prior to 1.0.3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 0.9.2.1
Modxcms Evolution
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
NA
CVE-2008-5940
SQL injection vulnerability in index.php in MODx 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-34377
CVE-2024-20859
CVE-2023-49606
inject
arbitrary
CVE-2024-33788
CVE-2024-30973
IDOR
CVE-2024-33907
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »