Description
SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65082
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN54092716/index.html
Third Party Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000008.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/70771
Various Sources x_refsource_confirm
http://modxcms.com/forums/index.php/topic%2C60045.0.html
Scores
EPSS
0.0173
EPSS Percentile
75.2%
Details
CWE
CWE-89
Status
published
Products (10)
modxcms/evolution
0.9.0
modxcms/evolution
0.9.1
modxcms/evolution
0.9.2.1
modxcms/evolution
0.9.5
modxcms/evolution
0.9.6
modxcms/evolution
0.9.6.1 (2 CPE variants)
modxcms/evolution
0.9.6.2
modxcms/evolution
1.0.2
modxcms/evolution
1.0.3
modxcms/evolution
< 1.0.4
Published
Feb 02, 2011
Tracked Since
Feb 18, 2026