Vendor/product archive

modxcms / evolution CVEs

Beta · best-effort

4 CVEs tagged to modxcms / evolution — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to modxcms vendor archive

CVE-2011-0741

Published Feb 2, 2011

Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-3930

Published Feb 2, 2011

Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vu…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-3929

Published Feb 2, 2011

SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2010-1427

Published Apr 15, 2010

Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown ve…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1