Unscored CVE-2014-2311 EUVD-2014-2349GHSA-wqr4-mq96-2v98

SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL comma…

Published Mar 11, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

[oss-security] 20140308 Re: CVE request: SQL injection in MODX Revolution before 2.2.13 mailing-list
http://forums.modx.com/thread/89486/modx-revolution-2-x-sql-injection
http://modx.com/blog/2014/03/07/revolution-2.2.13/