Modxcms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/modxcms/ Sun, 26 Feb 2023 09:11:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Modxcms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/modxcms/ 32 32 CVE-2008-7242 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7242/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7242/ Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) “a,” (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and […]

The post CVE-2008-7242 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) “a,” (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.

The post CVE-2008-7242 appeared first on CVE Vulnerability.

]]> CVE-2008-7243 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7243/ Sun, 26 Feb 2023 09:11:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7243/ Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.

The post CVE-2008-7243 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.

The post CVE-2008-7243 appeared first on CVE Vulnerability.

]]> CVE-2007-0659 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0659/ Sun, 26 Feb 2023 09:05:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0659/ download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.

The post CVE-2007-0659 appeared first on CVE Vulnerability.

]]> download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.

The post CVE-2007-0659 appeared first on CVE Vulnerability.

]]>