Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2010-1427

Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Modxcms
Products
Evolution
CVE-2010-3929

SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Modxcms
Products
Evolution
CVE-2010-3930

Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Modxcms
Products
Evolution
CVE-2011-0741

Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Modxcms
Products
Evolution