CVE-2010-3929: SQL Injection
Published Feb 2, 2011
·Updated
SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
Affected Software
11 affected components
Modxcms Evolution<=1.0.4
Modxcms Evolution=0.9.0
Modxcms Evolution=0.9.1
Modxcms Evolution=0.9.2.1
Modxcms Evolution=0.9.5
Modxcms Evolution=0.9.6
Modxcms Evolution=0.9.6.1
Modxcms Evolution=0.9.6.1-p1
Modxcms Evolution=0.9.6.2
Modxcms Evolution=1.0.2
Modxcms Evolution=1.0.3
Event History
Feb 2, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3929?
CVE-2010-3929 is classified as a medium severity vulnerability due to its potential for arbitrary SQL command execution.
2
How do I fix CVE-2010-3929?
To fix CVE-2010-3929, you should upgrade to MODx Evolution version 1.0.5 or later.
3
What systems are affected by CVE-2010-3929?
CVE-2010-3929 affects MODx Evolution versions 1.0.4 and earlier, including specific earlier versions like 0.9.0 through 1.0.3.
4
What type of vulnerability is CVE-2010-3929?
CVE-2010-3929 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
How does CVE-2010-3929 impact web applications?
CVE-2010-3929 can lead to unauthorized data access, data manipulation, and potentially full system compromise of affected web applications.