CVE

Id
47862  
CVE No.
CVE-2010-5278  
Status
Candidate  
Description
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20121007)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520346 47862 CVE-2010-5278 MISC:http://packetstormsecurity.org/1009-exploits/modx202pl-lfi.txt  View
520347 47862 CVE-2010-5278 MISC:http://www.johnleitch.net/Vulnerabilities/MODx.Revolution.2.0.2-pl.Local.File.Inclusion/49  View
520348 47862 CVE-2010-5278 CONFIRM:http://modxcms.com/forums/index.php/topic,55104.0.html  View
520349 47862 CVE-2010-5278 CONFIRM:http://modxcms.com/forums/index.php/topic,55105.msg317273.html  View
520350 47862 CVE-2010-5278 BID:43577  View
520351 47862 CVE-2010-5278 URL:http://www.securityfocus.com/bid/43577  View
520352 47862 CVE-2010-5278 OSVDB:68265  View
520353 47862 CVE-2010-5278 URL:http://www.osvdb.org/68265  View
520354 47862 CVE-2010-5278 SECUNIA:41638  View
520355 47862 CVE-2010-5278 URL:http://secunia.com/advisories/41638  View
520356 47862 CVE-2010-5278 XF:modx-classkey-file-include(62073)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29850 JVNDB-2012-005557 OpenText ECM におけるクロスサイトスクリプティングの脆弱性 OpenText ECM (formerly Livelink ECM) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-5282 47862 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005557.html  View