CVE-2008-0094: Path Traversal
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) include and execute arbitrary local files via a .. (dot dot) in the aslanguage parameter to assets/snippets/AjaxSearch/AjaxSearch.php, reached through index-ajax.php; and (2) read arbitrary local files via a .. (dot dot) in the file parameter to assets/js/htcmime.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0094?
CVE-2008-0094 is classified as a high severity vulnerability due to its risk of allowing remote code execution and unauthorized file access.
How do I fix CVE-2008-0094?
To fix CVE-2008-0094, upgrade the MODx Content Management System to a version later than 0.9.6.1 which addresses these vulnerabilities.
What types of attacks can exploit CVE-2008-0094?
CVE-2008-0094 can be exploited by remote attackers to execute arbitrary local files and read sensitive data through directory traversal techniques.
What versions of MODx are affected by CVE-2008-0094?
CVE-2008-0094 affects MODx Content Management System version 0.9.6.1 specifically.
How can I identify if my site is affected by CVE-2008-0094?
You can identify if your site is affected by CVE-2008-0094 by checking if it is running MODx version 0.9.6.1 and performing vulnerability scans.