CVE-2016-10038

Publication date

2016-12-24 11:00:00

Family

mitre

State

PUBLISHED

Description

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove.