CVE-2010-5278: Path Traversal
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the classkey parameter. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5278?
CVE-2010-5278 is classified as a high-severity vulnerability due to its ability to allow remote file access.
How do I fix CVE-2010-5278?
To mitigate CVE-2010-5278, upgrade MODx Revolution to version 2.0.2 or later with magic_quotes_gpc enabled.
What is the impact of CVE-2010-5278?
CVE-2010-5278 allows attackers to read arbitrary files on the server, potentially leading to sensitive information exposure.
Which versions of MODx Revolution are affected by CVE-2010-5278?
CVE-2010-5278 affects MODx Revolution version 2.0.2-pl and possibly earlier versions.
What exploit techniques are associated with CVE-2010-5278?
Attackers can exploit CVE-2010-5278 using directory traversal techniques by manipulating the class_key parameter.