SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors related to WebLogin.
https://exchange.xforce.ibmcloud.com/vulnerabilities/57636
http://secunia.com/advisories/39298
http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304