CVE-2007-5371: SQL Injection

Published Oct 11, 2007

Updated

Multiple SQL injection vulnerabilities in mutatecontent.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands via the (1) documentDirty or (2) modVariables parameter.

Affected Software

1 affected component

Modxcms Modxcms=0.9.6

Event History

Oct 11, 2007

CVE Published

10:17 AM

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5371?

CVE-2007-5371 has a moderate severity rating due to its potential for remote SQL injection attacks.

How do I fix CVE-2007-5371?

To fix CVE-2007-5371, upgrade to a version of MODx that is not vulnerable to SQL injection, or implement input validation to sanitize the documentDirty and modVariables parameters.

What impact does CVE-2007-5371 have on my MODx installation?

CVE-2007-5371 allows remote attackers to execute arbitrary SQL commands, potentially compromising database integrity and confidentiality.

Which software versions are affected by CVE-2007-5371?

CVE-2007-5371 specifically affects MODx CMS Evolution version 0.9.6.

Can CVE-2007-5371 be exploited without authentication?

Yes, CVE-2007-5371 can be exploited by unauthenticated remote attackers, making it a critical threat.