CVE

Id
30211  
CVE No.
CVE-2008-0094  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) include and execute arbitrary local files via a .. (dot dot) in the as_language parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and (2) read arbitrary local files via a .. (dot dot) in the file parameter to assets/js/htcmime.php.  
Phase
Assigned (20080107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
320523 30211 CVE-2008-0094 BUGTRAQ:20080102 MODx CMS Source code disclosure, local file inclusion  View
320524 30211 CVE-2008-0094 URL:http://www.securityfocus.com/archive/1/archive/1/485707/100/0/threaded  View
320525 30211 CVE-2008-0094 CONFIRM:http://modxcms.com/forums/index.php/topic,21290.0.html  View
320526 30211 CVE-2008-0094 BID:27096  View
320527 30211 CVE-2008-0094 URL:http://www.securityfocus.com/bid/27096  View
320528 30211 CVE-2008-0094 BID:27097  View
320529 30211 CVE-2008-0094 URL:http://www.securityfocus.com/bid/27097  View
320530 30211 CVE-2008-0094 SECUNIA:28220  View
320531 30211 CVE-2008-0094 URL:http://secunia.com/advisories/28220  View
320532 30211 CVE-2008-0094 SREASON:3522  View
320533 30211 CVE-2008-0094 URL:http://securityreason.com/securityalert/3522  View
320534 30211 CVE-2008-0094 XF:modx-ajaxsearch-file-include(39352)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50001 JVNDB-2008-005311 RealPlayer におけるバッファオーバーフローの脆弱性 RealPlayer には、バッファオーバーフローの脆弱性が存在します。 CVE-2008-0098 30211 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005311.html  View