Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
modxcms modxcms 0.9.1 vulnerabilities and exploits
(subscribe to this query)
515
VMScore
CVE-2006-5730
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this ...
Modxcms Modxcms 0.9.1
Modxcms Modxcms
1 EDB exploit
534
VMScore
CVE-2008-5941
Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and previous versions allows remote malicious users to perform unauthorized actions as other users via unknown vectors.
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms
605
VMScore
CVE-2008-5940
SQL injection vulnerability in index.php in MODx 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
435
VMScore
CVE-2008-5939
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php. NOTE: some sources list the id...
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.0
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
1 EDB exploit
383
VMScore
CVE-2008-5942
Multiple cross-site scripting (XSS) vulnerabilities in MODx prior to 0.9.6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939...
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
685
VMScore
CVE-2008-5938
PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary PHP code via a URL in the reflect_base parameter.
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6.1
1 EDB exploit
668
VMScore
CVE-2010-1426
SQL injection vulnerability in MODx Evolution prior to 1.0.3 allows remote malicious users to execute arbitrary SQL commands via unknown vectors related to WebLogin.
Modxcms Modxcms 0.9.6.1
Modxcms Modxcms 0.9.2.1
Modxcms Modxcms 0.9.6.2
Modxcms Modxcms 0.9.0
Modxcms Modxcms 0.9.6
Modxcms Modxcms 0.9.1
Modxcms Modxcms
Modxcms Modxcms 0.9.5
645
VMScore
CVE-2006-1821
Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote malicious users to read arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the id parameter.
Modxcms Modxcms 0.9.1
1 EDB exploit
585
VMScore
CVE-2006-1820
Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote malicious users to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability.
Modxcms Modxcms 0.9.1
1 EDB exploit
383
VMScore
CVE-2010-1427
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution prior to 1.0.3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Modxcms Evolution 0.9.6.1
Modxcms Evolution 0.9.2.1
Modxcms Evolution
Modxcms Evolution 0.9.5
Modxcms Evolution 0.9.0
Modxcms Evolution 0.9.1
Modxcms Evolution 0.9.6
Modxcms Evolution 0.9.6.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644
unprivileged
CVE-2024-3494
CVE-2024-22460
CVE-2024-26026
CVE-2024-23473
firewall
CVE-2024-28889
XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »