CVE-2017-9067

In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient…

published May 18, 2017

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00820 · 56.6th percentile
Published
2017-05-18T16:00Z
EPSS history
Timeline
  • 18 MAY 16:00Z
    In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient…
    cvelistv5