CVE-2016-10037
HighSummary
In MODX Revolution before version 2.5.2-pl, there is a directory traversal vulnerability in /connectors/index.php that allows remote attackers to manipulate local files via a crafted id (also known as dir) parameter.
Risk Assessment
Attackers may gain access to sensitive files on the server, potentially leading to data exposure or further attacks on the system.
Recommendation
It is recommended to upgrade MODX Revolution to version 2.5.2-pl or later to mitigate this vulnerability.
Other vulnerabilities in MODX Revolution
See all- CVE-2017-1000067High
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method, allowing authenticated users to access the database and possibly escalate privileges.
- CVE-2017-9069High
In MODX Revolution before version 2.5.7, a user with file upload permissions can execute arbitrary code by uploading a file named .htaccess.
- CVE-2017-9067High
In MODX Revolution before version 2.5.7, when using PHP 5.3.3, an attacker can include and execute arbitrary files on the web server due to insufficient validation of the action parameter in setup/index.php, leading to a directory traversal attack.
- CVE-2017-7322High
MODX Revolution versions 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers in the update and package-installation features, allowing man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code via a crafted certificate.
- CVE-2016-10039High
In MODX Revolution before version 2.5.2-pl, there is a directory traversal vulnerability in /connectors/index.php that allows remote attackers to manipulate local files via a crafted dir parameter.
- CVE-2016-10038High
In MODX Revolution before version 2.5.2-pl, there is a directory traversal vulnerability in /connectors/index.php that allows remote attackers to manipulate local files via a crafted dir parameter.
- CVE-2014-2736High
Multiple SQL injection vulnerabilities in MODX Revolution before version 2.2.14 allow remote attackers to execute arbitrary SQL commands. Attackers can exploit the session ID (PHPSESSID) in index.php or user parameters in connectors/security/message.php and id in manager/index.php.
- CVE-2014-2311High
SQL injection vulnerability in modx.class.php in MODX Revolution versions 2.0.0 to 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2017-7324Critical
The findcore.php file in MODX Revolution version 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter.
- CVE-2017-7321Critical
In MODX Revolution version 2.5.4-pl and earlier, the setup/controllers/welcome.php file allows remote attackers to execute arbitrary PHP code via the config_key parameter to the setup/index.php?action=welcome URI.
Original NVD description (English source)
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, related to browser/directory/getlist.