CVE-2010-3930

Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.

Score

CVSS 2.0 5.0 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2011-02-02

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Evolution (Modxcms)

References

• http://jvn.jp/en/jp/JVN95385972/index.html
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html
• http://modxcms.com/forums/index.php/topic%2C60045.0.html
• http://osvdb.org/70772