Detections
Analytics
MODx < 0.9.1a Multiple Vulnerabilities
medium Nessus Plugin ID 21235
Language:
Synopsis
The remote web server contains a PHP script that is susceptible to multiple issues.Description
The remote host is running MODx, a content management system written in PHP.The version of MODx installed on the remote host fails to sanitize input to the 'id' parameter of the 'index.php' script before using it to generate dynamic HTML output. An unauthenticated attacker can exploit this to inject arbitrary script and HTML into a user's browser.
Also, the same lack of input sanitation reportedly can be leveraged to launch directory traversal attacks against the affected application, although exploitation may only be successful if the affected host is running Windows and if PHP's 'magic_quotes_gpc' setting is disabled.
Solution
Upgrade to MODx version 0.9.1a or later.See Also
https://www.securityfocus.com/archive/1/431010/30/0/threaded
Plugin Details
Severity: Medium
ID: 21235
File Name: modx_091a.nasl
Version: 1.23
Type: remote
Family: CGI abuses
Published: 4/17/2006
Updated: 4/7/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.0
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
Vulnerability Information
CPE: cpe:/a:modxcms:modxcms
Required KB Items: www/PHP, www/modx
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 4/14/2006
Reference Information
CVE: CVE-2006-1820, CVE-2006-1821