Description
SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/03/09/3
Various Sources x_refsource_confirm
http://forums.modx.com/thread/89486/modx-revolution-2-x-sql-injection
Vendor Advisory x_refsource_confirm
http://modx.com/blog/2014/03/07/revolution-2.2.13/
Scores
EPSS
0.0126
EPSS Percentile
66.5%
Details
CWE
CWE-89
Status
published
Products (27)
modx/modx_revolution
2.0.0
modx/modx_revolution
2.0.1
modx/modx_revolution
2.0.3
modx/modx_revolution
2.0.4
modx/modx_revolution
2.0.5
modx/modx_revolution
2.0.6
modx/modx_revolution
2.0.7
modx/modx_revolution
2.0.8
modx/modx_revolution
2.1.0
modx/modx_revolution
2.1.1
... and 17 more
Published
Mar 11, 2014
Tracked Since
Feb 18, 2026