Search criteria
12 vulnerabilities found for evolution by modxcms
CVE-2011-0741 (GCVE-0-2011-0741)
Vulnerability from nvd – Published: 2011-02-02 00:00 – Updated: 2024-08-06 22:05
VLAI
Summary
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/46154 | vdb-entryx_refsource_BID |
| http://modxcms.com/forums/index.php/topic%2C60045… | x_refsource_CONFIRM |
Date Public
2011-01-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T22:05:53.416Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "evolution-multiple-xss(65164)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"name": "46154",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/46154"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "evolution-multiple-xss(65164)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"name": "46154",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/46154"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0741",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "evolution-multiple-xss(65164)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"name": "46154",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/46154"
},
{
"name": "http://modxcms.com/forums/index.php/topic,60045.0.html",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,60045.0.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0741",
"datePublished": "2011-02-02T00:00:00.000Z",
"dateReserved": "2011-02-01T00:00:00.000Z",
"dateUpdated": "2024-08-06T22:05:53.416Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-3930 (GCVE-0-2010-3930)
Vulnerability from nvd – Published: 2011-02-02 00:00 – Updated: 2024-08-07 03:26
VLAI
Summary
Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://osvdb.org/70772 | vdb-entryx_refsource_OSVDB |
| http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0… | third-party-advisoryx_refsource_JVNDB |
| http://modxcms.com/forums/index.php/topic%2C60045… | x_refsource_CONFIRM |
| http://jvn.jp/en/jp/JVN95385972/index.html | third-party-advisoryx_refsource_JVN |
Date Public
2011-01-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T03:26:12.229Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "70772",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70772"
},
{
"name": "JVNDB-2011-000009",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"name": "JVN#95385972",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2011-02-12T10:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "70772",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70772"
},
{
"name": "JVNDB-2011-000009",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"name": "JVN#95385972",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2010-3930",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "70772",
"refsource": "OSVDB",
"url": "http://osvdb.org/70772"
},
{
"name": "JVNDB-2011-000009",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"name": "http://modxcms.com/forums/index.php/topic,60045.0.html",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,60045.0.html"
},
{
"name": "JVN#95385972",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2010-3930",
"datePublished": "2011-02-02T00:00:00.000Z",
"dateReserved": "2010-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T03:26:12.229Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-3929 (GCVE-0-2010-3929)
Vulnerability from nvd – Published: 2011-02-02 00:00 – Updated: 2024-08-07 03:26
VLAI
Summary
SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://jvn.jp/en/jp/JVN54092716/index.html | third-party-advisoryx_refsource_JVN |
| http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0… | third-party-advisoryx_refsource_JVNDB |
| http://osvdb.org/70771 | vdb-entryx_refsource_OSVDB |
| http://modxcms.com/forums/index.php/topic%2C60045… | x_refsource_CONFIRM |
Date Public
2011-01-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T03:26:12.295Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "modx-evolution-unspec-sql-injection(65082)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"name": "JVN#54092716",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"name": "JVNDB-2011-000008",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"name": "70771",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70771"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "modx-evolution-unspec-sql-injection(65082)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"name": "JVN#54092716",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"name": "JVNDB-2011-000008",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"name": "70771",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70771"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2010-3929",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "modx-evolution-unspec-sql-injection(65082)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"name": "JVN#54092716",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"name": "JVNDB-2011-000008",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"name": "70771",
"refsource": "OSVDB",
"url": "http://osvdb.org/70771"
},
{
"name": "http://modxcms.com/forums/index.php/topic,60045.0.html",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,60045.0.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2010-3929",
"datePublished": "2011-02-02T00:00:00.000Z",
"dateReserved": "2010-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T03:26:12.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-1427 (GCVE-0-2010-1427)
Vulnerability from nvd – Published: 2010-04-15 21:12 – Updated: 2024-08-07 01:21
VLAI
Summary
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-0… | third-party-advisoryx_refsource_JVNDB |
| http://secunia.com/advisories/39298 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://jvn.jp/en/jp/JVN46669729/index.html | third-party-advisoryx_refsource_JVN |
| http://modxcms.com/forums/index.php/topic%2C47759… | x_refsource_CONFIRM |
Date Public
2010-04-08 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T01:21:19.106Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "JVNDB-2010-000013",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"name": "39298",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/39298"
},
{
"name": "modx-unspecified-xss(57635)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"name": "JVN#46669729",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-04-08T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "JVNDB-2010-000013",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"name": "39298",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/39298"
},
{
"name": "modx-unspecified-xss(57635)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"name": "JVN#46669729",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-1427",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "JVNDB-2010-000013",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"name": "39298",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/39298"
},
{
"name": "modx-unspecified-xss(57635)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"name": "JVN#46669729",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"name": "http://modxcms.com/forums/index.php/topic,47759.msg280304.html#msg280304",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,47759.msg280304.html#msg280304"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-1427",
"datePublished": "2010-04-15T21:12:00.000Z",
"dateReserved": "2010-04-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T01:21:19.106Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
FKIE_CVE-2011-0741
Vulnerability from fkie_nvd - Published: 2011-02-02 01:00 - Updated: 2026-04-29 01:13
Severity
Summary
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:modxcms:evolution:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BDFFF8D2-5523-486F-9501-6F4EBA745DB8",
"versionEndIncluding": "1.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "03417566-A7B2-4134-8B82-CA7E0CEB67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DDD1F870-6A9D-4C56-9538-E96963F3A7DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F8117189-9F47-4385-A7C3-C2603D571E69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "80B5D1A6-5648-416C-AABD-7314FB200089",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4ED1ED8B-3F02-4DFB-84EF-1460DC2C67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17CF3822-CEC6-4ECE-82DE-A30F7A14A780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:p1:*:*:*:*:*:*",
"matchCriteriaId": "A701461C-4B50-436E-9535-B2226D981E1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C658DBC9-DDDA-4057-852E-0E87370470D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "854253AE-85B6-4D07-BFC7-172158DB1A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "15FA0DC3-EE5A-4350-8F56-2C3F519D685A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor."
},
{
"lang": "es",
"value": "Ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en modx Evoluci\u00f3n anterior a v1.0.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del instalador (1) o (2) editor de imagen."
}
],
"id": "CVE-2011-0741",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2011-02-02T01:00:07.407",
"references": [
{
"source": "cve@mitre.org",
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/46154"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/46154"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2010-3929
Vulnerability from fkie_nvd - Published: 2011-02-02 01:00 - Updated: 2026-04-29 01:13
Severity
Summary
SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:modxcms:evolution:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BDFFF8D2-5523-486F-9501-6F4EBA745DB8",
"versionEndIncluding": "1.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "03417566-A7B2-4134-8B82-CA7E0CEB67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DDD1F870-6A9D-4C56-9538-E96963F3A7DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F8117189-9F47-4385-A7C3-C2603D571E69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "80B5D1A6-5648-416C-AABD-7314FB200089",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4ED1ED8B-3F02-4DFB-84EF-1460DC2C67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17CF3822-CEC6-4ECE-82DE-A30F7A14A780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:p1:*:*:*:*:*:*",
"matchCriteriaId": "A701461C-4B50-436E-9535-B2226D981E1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C658DBC9-DDDA-4057-852E-0E87370470D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "854253AE-85B6-4D07-BFC7-172158DB1A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "15FA0DC3-EE5A-4350-8F56-2C3F519D685A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch."
},
{
"lang": "es",
"value": "Vulnerabilidad de inyecci\u00f3n SQL en MODx Evolution v1.0.4 y anteriores permite a atacantes remotos ejecutar comandos SQL a trav\u00e9s de vectores desconocidos relacionados con ajaxsearch."
}
],
"id": "CVE-2010-3929",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-02-02T01:00:03.077",
"references": [
{
"source": "vultures@jpcert.or.jp",
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "http://osvdb.org/70771"
},
{
"source": "vultures@jpcert.or.jp",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/70771"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
}
],
"sourceIdentifier": "vultures@jpcert.or.jp",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2010-3930
Vulnerability from fkie_nvd - Published: 2011-02-02 01:00 - Updated: 2026-04-29 01:13
Severity
Summary
Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:modxcms:evolution:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BDFFF8D2-5523-486F-9501-6F4EBA745DB8",
"versionEndIncluding": "1.0.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "03417566-A7B2-4134-8B82-CA7E0CEB67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DDD1F870-6A9D-4C56-9538-E96963F3A7DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F8117189-9F47-4385-A7C3-C2603D571E69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "80B5D1A6-5648-416C-AABD-7314FB200089",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4ED1ED8B-3F02-4DFB-84EF-1460DC2C67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17CF3822-CEC6-4ECE-82DE-A30F7A14A780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:p1:*:*:*:*:*:*",
"matchCriteriaId": "A701461C-4B50-436E-9535-B2226D981E1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C658DBC9-DDDA-4057-852E-0E87370470D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "854253AE-85B6-4D07-BFC7-172158DB1A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "15FA0DC3-EE5A-4350-8F56-2C3F519D685A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427."
},
{
"lang": "es",
"value": "Vulnerabilidad de salto de directorio en MODx Evolution v1.0.4 y anteriores permite a atacantes remotos leer archivos de su elecci\u00f3n a trav\u00e9s de vectores no especificados relacionados con ajaxsearch, una vulnerabilidad diferente de CVE-2010-1427."
}
],
"id": "CVE-2010-3930",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-02-02T01:00:03.140",
"references": [
{
"source": "vultures@jpcert.or.jp",
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"source": "vultures@jpcert.or.jp",
"url": "http://osvdb.org/70772"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/70772"
}
],
"sourceIdentifier": "vultures@jpcert.or.jp",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-22"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2010-1427
Vulnerability from fkie_nvd - Published: 2010-04-15 21:30 - Updated: 2026-04-29 01:13
Severity
Summary
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
References
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:modxcms:evolution:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D619E64C-0F25-4F77-809E-14CAAE8E4361",
"versionEndIncluding": "1.0.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "03417566-A7B2-4134-8B82-CA7E0CEB67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "DDD1F870-6A9D-4C56-9538-E96963F3A7DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F8117189-9F47-4385-A7C3-C2603D571E69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "80B5D1A6-5648-416C-AABD-7314FB200089",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4ED1ED8B-3F02-4DFB-84EF-1460DC2C67F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "17CF3822-CEC6-4ECE-82DE-A30F7A14A780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.1:p1:*:*:*:*:*:*",
"matchCriteriaId": "A701461C-4B50-436E-9535-B2226D981E1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:modxcms:evolution:0.9.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C658DBC9-DDDA-4057-852E-0E87370470D6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch."
},
{
"lang": "es",
"value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en el plugin SearchHighlight en MODx Evolution anterior v1.0.3 permite a atacantes remotos inyectar c\u00f3digo web o HTML de su elecci\u00f3n a trav\u00e9s de vectores desconocidos relacionados con AjaxSearch."
}
],
"id": "CVE-2010-1427",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2010-04-15T21:30:00.447",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"source": "cve@mitre.org",
"url": "http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/39298"
},
{
"source": "cve@mitre.org",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/39298"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2010-3929 (GCVE-0-2010-3929)
Vulnerability from cvelistv5 – Published: 2011-02-02 00:00 – Updated: 2024-08-07 03:26
VLAI
Summary
SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://jvn.jp/en/jp/JVN54092716/index.html | third-party-advisoryx_refsource_JVN |
| http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0… | third-party-advisoryx_refsource_JVNDB |
| http://osvdb.org/70771 | vdb-entryx_refsource_OSVDB |
| http://modxcms.com/forums/index.php/topic%2C60045… | x_refsource_CONFIRM |
Date Public
2011-01-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T03:26:12.295Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "modx-evolution-unspec-sql-injection(65082)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"name": "JVN#54092716",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"name": "JVNDB-2011-000008",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"name": "70771",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70771"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "modx-evolution-unspec-sql-injection(65082)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"name": "JVN#54092716",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"name": "JVNDB-2011-000008",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"name": "70771",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70771"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2010-3929",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "modx-evolution-unspec-sql-injection(65082)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65082"
},
{
"name": "JVN#54092716",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN54092716/index.html"
},
{
"name": "JVNDB-2011-000008",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html"
},
{
"name": "70771",
"refsource": "OSVDB",
"url": "http://osvdb.org/70771"
},
{
"name": "http://modxcms.com/forums/index.php/topic,60045.0.html",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,60045.0.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2010-3929",
"datePublished": "2011-02-02T00:00:00.000Z",
"dateReserved": "2010-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T03:26:12.295Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2011-0741 (GCVE-0-2011-0741)
Vulnerability from cvelistv5 – Published: 2011-02-02 00:00 – Updated: 2024-08-06 22:05
VLAI
Summary
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/46154 | vdb-entryx_refsource_BID |
| http://modxcms.com/forums/index.php/topic%2C60045… | x_refsource_CONFIRM |
Date Public
2011-01-19 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T22:05:53.416Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "evolution-multiple-xss(65164)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"name": "46154",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/46154"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-19T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "evolution-multiple-xss(65164)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"name": "46154",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/46154"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-0741",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "evolution-multiple-xss(65164)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65164"
},
{
"name": "46154",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/46154"
},
{
"name": "http://modxcms.com/forums/index.php/topic,60045.0.html",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,60045.0.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-0741",
"datePublished": "2011-02-02T00:00:00.000Z",
"dateReserved": "2011-02-01T00:00:00.000Z",
"dateUpdated": "2024-08-06T22:05:53.416Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-3930 (GCVE-0-2010-3930)
Vulnerability from cvelistv5 – Published: 2011-02-02 00:00 – Updated: 2024-08-07 03:26
VLAI
Summary
Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://osvdb.org/70772 | vdb-entryx_refsource_OSVDB |
| http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0… | third-party-advisoryx_refsource_JVNDB |
| http://modxcms.com/forums/index.php/topic%2C60045… | x_refsource_CONFIRM |
| http://jvn.jp/en/jp/JVN95385972/index.html | third-party-advisoryx_refsource_JVN |
Date Public
2011-01-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T03:26:12.229Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "70772",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/70772"
},
{
"name": "JVNDB-2011-000009",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"name": "JVN#95385972",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-01-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2011-02-12T10:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "70772",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/70772"
},
{
"name": "JVNDB-2011-000009",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C60045.0.html"
},
{
"name": "JVN#95385972",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2010-3930",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "70772",
"refsource": "OSVDB",
"url": "http://osvdb.org/70772"
},
{
"name": "JVNDB-2011-000009",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html"
},
{
"name": "http://modxcms.com/forums/index.php/topic,60045.0.html",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,60045.0.html"
},
{
"name": "JVN#95385972",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN95385972/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2010-3930",
"datePublished": "2011-02-02T00:00:00.000Z",
"dateReserved": "2010-10-12T00:00:00.000Z",
"dateUpdated": "2024-08-07T03:26:12.229Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-1427 (GCVE-0-2010-1427)
Vulnerability from cvelistv5 – Published: 2010-04-15 21:12 – Updated: 2024-08-07 01:21
VLAI
Summary
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-0… | third-party-advisoryx_refsource_JVNDB |
| http://secunia.com/advisories/39298 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://jvn.jp/en/jp/JVN46669729/index.html | third-party-advisoryx_refsource_JVN |
| http://modxcms.com/forums/index.php/topic%2C47759… | x_refsource_CONFIRM |
Date Public
2010-04-08 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T01:21:19.106Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "JVNDB-2010-000013",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB",
"x_transferred"
],
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"name": "39298",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/39298"
},
{
"name": "modx-unspecified-xss(57635)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"name": "JVN#46669729",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-04-08T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "JVNDB-2010-000013",
"tags": [
"third-party-advisory",
"x_refsource_JVNDB"
],
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"name": "39298",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/39298"
},
{
"name": "modx-unspecified-xss(57635)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"name": "JVN#46669729",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-1427",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "JVNDB-2010-000013",
"refsource": "JVNDB",
"url": "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html"
},
{
"name": "39298",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/39298"
},
{
"name": "modx-unspecified-xss(57635)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57635"
},
{
"name": "JVN#46669729",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN46669729/index.html"
},
{
"name": "http://modxcms.com/forums/index.php/topic,47759.msg280304.html#msg280304",
"refsource": "CONFIRM",
"url": "http://modxcms.com/forums/index.php/topic,47759.msg280304.html#msg280304"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-1427",
"datePublished": "2010-04-15T21:12:00.000Z",
"dateReserved": "2010-04-15T00:00:00.000Z",
"dateUpdated": "2024-08-07T01:21:19.106Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}