İçeriğe atla
Noroxi

modxcms kayıtları

modxcms üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    18 kayıt
    • CVE-2010-3929
      31İzleyin

      SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vector

      YüksekCVSS 7,5İstismar yokEPSS %2

      modxcms · evolution1 Şub 2011

    • CVE-2007-0659
      30İzleyin

      download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrat

      YüksekCVSS 7,5İstismar yokEPSS %1

      modxcms · filedownload1 Şub 2007

    • CVE-2010-1426
      30İzleyin

      SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors rel

      YüksekCVSS 7,5İstismar yokEPSS %1

      modxcms · modxcms15 Nis 2010

    • CVE-2008-5938
      28İzleyin

      PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magic_quotes_gp

      OrtaCVSS 6,8Kavram kanıtıEPSS %2

      modxcms · modxcms22 Oca 2009

    • CVE-2008-5940
      27İzleyin

      SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute

      OrtaCVSS 6,8İstismar yokEPSS %1

      modxcms · modxcms22 Oca 2009

    • CVE-2007-5371
      27İzleyin

      Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands

      OrtaCVSS 6,8İstismar yokEPSS %1

      modxcms · modxcms11 Eki 2007

    • CVE-2008-7243
      27İzleyin

      Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentic

      OrtaCVSS 6,8İstismar yokEPSS %1

      modxcms · modxcms17 Eyl 2009

    • CVE-2008-0094
      26İzleyin

      Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) include and execute arb

      OrtaCVSS 6,4Kavram kanıtıEPSS %3

      modxcms · modxcms7 Oca 2008

    • CVE-2006-1821
      26İzleyin

      Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a ..

      OrtaCVSS 6,4Kavram kanıtıEPSS %3

      modxcms · modxcms18 Nis 2006

    • CVE-2006-1820
      24İzleyin

      Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the i

      OrtaCVSS 5,8Kavram kanıtıEPSS %2

      modxcms · modxcms18 Nis 2006

    • CVE-2008-5941
      24İzleyin

      Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as oth

      OrtaCVSS 6,0İstismar yokEPSS %0

      modxcms · modxcms22 Oca 2009

    • CVE-2006-5730
      21İzleyin

      PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier

      OrtaCVSS 5,1Kavram kanıtıEPSS %3

      modxcms · modxcms6 Kas 2006

    • CVE-2010-3930
      21İzleyin

      Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vector

      OrtaCVSS 5,0İstismar yokEPSS %2

      modxcms · evolution1 Şub 2011

    • CVE-2008-5939
      18İzleyin

      Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject arbitrary web script

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      modxcms · modxcms22 Oca 2009

    • CVE-2011-0741
      18İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or

      OrtaCVSS 4,3İstismar yokEPSS %2

      modxcms · evolution1 Şub 2011

    • CVE-2010-1427
      17İzleyin

      Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbi

      OrtaCVSS 4,3İstismar yokEPSS %2

      modxcms · evolution15 Nis 2010

    • CVE-2008-7242
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script o

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      modxcms · modxcms17 Eyl 2009

    • CVE-2008-5942
      17İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via

      OrtaCVSS 4,3İstismar yokEPSS %1

      modxcms · modxcms22 Oca 2009