Security Advisory

CVE-2016-10037

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-12-24 11:00:00

Last updated 2024-08-06 03:07:31

Assigner mitre

State PUBLISHED

Description

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, related to browser/directory/getlist.

← Browse all CVEs View on cve.org ↗