PT-2009-1413 · Modx · Modx Cms

Romancyxhacker · Published 2009-01-22 · Updated 2017-09-29 · CVE-2008-5938

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MODx CMS versions 0.9.6.2 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code when magic quotes gpc is disabled. This is achieved via a URL in the reflect base parameter.

Recommendations For MODx CMS versions 0.9.6.2 and earlier, consider disabling the reflect snippet or restricting access to the assets/snippets/reflect/snippet.reflect.php file until a patch is available. Additionally, enabling magic quotes gpc can help mitigate this issue.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-5938

Affected Products

Modx Cms

References · 9

• 🔥 http://securityfocus.com/bid/32436 · Exploit
• 🔥 https://exploit-db.com/exploits/7204 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5938 · Security Note
• http://secunia.com/advisories/32824 · Vendor Advisory
• http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt · Vendor Advisory
• http://vupen.com/english/advisories/2008/3236 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46797 · Note
• http://securityreason.com/securityalert/4940 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5938 · Note