Bekannte Schwachstellen
| CVE | Titel | Betroffene Versionen | CVSS | Ausgenutzt | EPSS | Veröffentlicht |
|---|---|---|---|---|---|---|
| CVE-2020-25911 | A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.... | * | — | — | 2021-11-01 | |
| CVE-2018-20757 | MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute na... | * | — | — | 2019-02-07 | |
| CVE-2018-20758 | MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description. | * | — | — | 2019-02-07 | |
| CVE-2018-20756 | MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled... | * | — | — | 2019-02-07 | |
| CVE-2018-20755 | MODX Revolution through v2.7.0-pl allows XSS via the User Photo field. | * | — | — | 2019-02-07 | |
| CVE-2018-17556 | MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action. | * | — | — | 2018-09-27 | |
| CVE-2018-1000208 | MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerreq... | * | — | — | 2018-07-14 | |
| CVE-2018-1000207 | MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters... | * | — | — | 2018-07-14 | |
| CVE-2018-10382 | MODX Revolution 2.6.3 has XSS. | * | — | — | 2018-06-02 | |
| CVE-2017-11744 | In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS.... | * | — | — | 2017-07-31 | |
| CVE-2017-1000067 | MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by th... | * | — | — | 2017-07-14 | |
| CVE-2017-9069 | In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uplo... | * | — | — | 2017-05-19 | |
| CVE-2017-9067 | In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary... | * | 7.0 | — | 2017-05-19 | |
| CVE-2017-9068 | In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into sever... | * | — | — | 2017-05-19 | |
| CVE-2017-9071 | In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP... | * | — | — | 2017-05-19 | |
| CVE-2017-9070 | In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the titl... | * | — | — | 2017-05-19 | |
| CVE-2017-8115 | Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Re... | * | — | — | 2017-04-26 | |
| CVE-2016-10037 | Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to per... | * | — | — | 2016-12-24 | |
| CVE-2016-10038 | Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to per... | * | — | — | 2016-12-24 | |
| CVE-2016-10039 | Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to per... | * | — | — | 2016-12-24 | |
| CVE-2014-8992 | Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution... | * | — | — | 2014-12-23 | |
| CVE-2014-5451 | Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in MODX Revolution 2.3.1-pl a... | * | — | — | 2014-11-07 | |
| CVE-2014-2080 | Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2... | * | — | — | 2014-03-01 |
Verfolgen Sie diese Versionen auf Ihren eigenen Servern
InfraGuard erfasst die installierten Softwareversionen auf jedem Server und markiert diejenigen mit bekannten Schwachstellen. Self-Hosted – nichts verlässt Ihr Netzwerk.
Daten: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (siehe EPSS unter https://www.first.org/epss), endoflife.date. Softwareliste: awesome-selfhosted (CC BY-SA 3.0).