Vulnerability Details CVE-2010-3930
Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://jvn.jp/en/jp/JVN95385972/index.html
- http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html
- http://modxcms.com/forums/index.php/topic%2C60045.0.html
- http://osvdb.org/70772
- http://jvn.jp/en/jp/JVN95385972/index.html
- http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000009.html
- http://modxcms.com/forums/index.php/topic%2C60045.0.html
- http://osvdb.org/70772
Products affected by CVE-2010-3930
-
cpe:2.3:a:modxcms:evolution:*
-
cpe:2.3:a:modxcms:evolution:0.9.0
-
cpe:2.3:a:modxcms:evolution:0.9.1
-
cpe:2.3:a:modxcms:evolution:0.9.2.1
-
cpe:2.3:a:modxcms:evolution:0.9.5
-
cpe:2.3:a:modxcms:evolution:0.9.6
-
cpe:2.3:a:modxcms:evolution:0.9.6.1
-
cpe:2.3:a:modxcms:evolution:0.9.6.2
-
cpe:2.3:a:modxcms:evolution:1.0.2
-
cpe:2.3:a:modxcms:evolution:1.0.3