MODx Evolution Directory Traversal and SQL Injection Vulnerabilities
BID:46163
Info
MODx Evolution Directory Traversal and SQL Injection Vulnerabilities
| Bugtraq ID: | 46163 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3929 CVE-2010-3930 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 19 2011 12:00AM |
| Updated: | Jan 19 2011 12:00AM |
| Credit: | smashingred |
| Vulnerable: |
MODx MODx Evolution 1.0.4 MODx MODx Evolution 1.0.3 MODx MODx Evolution 1.0.2 |
| Not Vulnerable: |
MODx MODx Evolution 1.0.5 |
Discussion
MODx Evolution Directory Traversal and SQL Injection Vulnerabilities
MODx Evolution is prone to an SQL-injection vulnerability and a directory-traversal vulnerability.
Exploiting the directory traversal issue will allow an attacker to read arbitrary files within the context of the webserver process. Information obtained may aid in further attacks
A successful exploit of the SQL-injection issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to MODx Evolution 1.0.5 are vulnerable.
MODx Evolution is prone to an SQL-injection vulnerability and a directory-traversal vulnerability.
Exploiting the directory traversal issue will allow an attacker to read arbitrary files within the context of the webserver process. Information obtained may aid in further attacks
A successful exploit of the SQL-injection issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to MODx Evolution 1.0.5 are vulnerable.
Exploit / POC
MODx Evolution Directory Traversal and SQL Injection Vulnerabilities
An attacker can exploit these issues via a browser.
An attacker can exploit these issues via a browser.
Solution / Fix
MODx Evolution Directory Traversal and SQL Injection Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
MODx Evolution Directory Traversal and SQL Injection Vulnerabilities
References:
References:
- MODx Homepage (MODx)
- JVN#54092716 MODx Evolution vulnerable to SQL injection (JPCERT/CC and IPA.)
- MODX Evolution 1.0.5 Tightens Security and Lots of Little Improvements (MODx)