Skip to content
OpenAdvisories

Archive

30 March 2017

Vulnerabilities first published on this day (UTC), newest first.

45 results · Feed

  • Unscored —

    The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certif…

  • Unscored —

    setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP …

  • Unscored —

    The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com b…

  • Unscored —

    setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language paramet…

  • Unscored —

    SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrato…