CVE-2010-1426
Published Apr 15, 2010
Last updated a year ago
Overview
- Description
- SQL injection vulnerability in MODx Evolution before 1.0.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors related to WebLogin.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:modxcms:modxcms:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3531AECE-CEA2-4675-BB22-CC7229D026AA",
"versionEndIncluding": "1.0.2"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FAEAB43-9356-4B48-B252-8F26874302F4"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E02443C7-BCFC-44B8-B7F0-490B01DD4220"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AC57D5A-222E-49AE-B75B-A02AC6CA0A2B"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A0BF512-B7EA-419D-966E-94F847DF52CF"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88C92A22-4E59-4D31-B476-AC80DAFC3BC5"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E9E1F5D-2B90-454A-BDA8-5D3B2683078F"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.6.1:p1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3707754B-A6F7-49E4-8426-ED0D2437D2C6"
},
{
"criteria": "cpe:2.3:a:modxcms:modxcms:0.9.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C63339DA-87F6-4F3A-9321-EF422400AD29"
}
],
"operator": "OR"
}
]
}
]