Multiple SQL injection vulnerabilities in mutate_content... · CVE-2007-5371 · GitHub Advisory Database · GitHub

Multiple SQL injection vulnerabilities in mutate_content...

Moderate severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 31, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Multiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands via the (1) documentDirty or (2) modVariables parameter.

References

Published by the National Vulnerability Database

Oct 11, 2007

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 31, 2023