Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-7242. PoCs published by Alexandr Polyakov.
AI-analyzed exploit summary This exploit demonstrates multiple XSS vulnerabilities in MODx by injecting malicious JavaScript via unsanitized input parameters in the URL. The PoC includes specific URLs that trigger alerts when executed in a vulnerable MODx installation.
Description
Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.
Exploits (1)
This exploit demonstrates multiple XSS vulnerabilities in MODx by injecting malicious JavaScript via unsanitized input parameters in the URL. The PoC includes specific URLs that trigger alerts when executed in a vulnerable MODx installation.