Modxcms vulnerabilities

Products

• Modxcms 13
• Evolution 4

Newest

• modxcms evolution Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote... CVE-2011-0741 4.3 MediumFebruary 2, 2011
• modxcms evolution Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to... CVE-2010-3930 5.0 MediumFebruary 2, 2011
• modxcms evolution SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to... CVE-2010-3929 7.5 HighFebruary 2, 2011
• modxcms evolution Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1... CVE-2010-1427 4.3 MediumApril 15, 2010
• modxcms SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute... CVE-2010-1426 7.5 HighApril 15, 2010
• modxcms Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1... CVE-2008-7243 6.8 MediumSeptember 17, 2009
• modxcms Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote... CVE-2008-7242 Public exploit 4.3 MediumSeptember 17, 2009
• modxcms Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers... CVE-2008-5942 4.3 MediumJanuary 22, 2009
• modxcms Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote... CVE-2008-5941 6.0 MediumJanuary 22, 2009
• modxcms SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is... CVE-2008-5940 6.8 MediumJanuary 22, 2009
• modxcms Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows... CVE-2008-5939 Public exploit 4.3 MediumJanuary 22, 2009
• modxcms PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx... CVE-2008-5938 Public exploit 6.8 MediumJanuary 22, 2009
• modxcms Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow... CVE-2008-0094 Public exploit 6.4 MediumJanuary 8, 2008
• modxcms Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote... CVE-2007-5371 6.8 MediumOctober 11, 2007
• modxcms filedownload download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers... CVE-2007-0659 7.5 HighFebruary 1, 2007
• modxcms PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands... CVE-2006-5730 Public exploit 5.1 MediumNovember 6, 2006
• modxcms Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read... CVE-2006-1821 Public exploit 6.4 MediumApril 18, 2006
• modxcms Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to... CVE-2006-1820 Public exploit 5.8 MediumApril 18, 2006