Unscored CVE-2010-3929 EUVD-2010-3907GHSA-98fv-x3p6-qjrq

SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vecto…

Published Feb 2, 2011 · Updated Aug 7, 2024 · Assigned by jpcert

Description

SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.

References

modx-evolution-unspec-sql-injection(65082) vdb-entry
JVN#54092716 third-party-advisory
JVNDB-2011-000008 third-party-advisory
70771 vdb-entry
http://modxcms.com/forums/index.php/topic%2C60045.0.html