CVE-2014-2311: SQL Injection
Published Mar 11, 2014
·Updated
SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
27 affected components
MODx MODX Revolution=2.0.0
MODx MODX Revolution=2.0.1
MODx MODX Revolution=2.0.3
MODx MODX Revolution=2.0.4
MODx MODX Revolution=2.0.5
MODx MODX Revolution=2.0.6
MODx MODX Revolution=2.0.7
MODx MODX Revolution=2.0.8
MODx MODX Revolution=2.1.0
MODx MODX Revolution=2.1.1
MODx MODX Revolution=2.1.2
MODx MODX Revolution=2.1.3
MODx MODX Revolution=2.1.4
MODx MODX Revolution=2.1.5
MODx MODX Revolution=2.2.0
MODx MODX Revolution=2.2.1
MODx MODX Revolution=2.2.2
MODx MODX Revolution=2.2.3
MODx MODX Revolution=2.2.4
MODx MODX Revolution=2.2.5
MODx MODX Revolution=2.2.6
MODx MODX Revolution=2.2.7
MODx MODX Revolution=2.2.8
MODx MODX Revolution=2.2.9
MODx MODX Revolution=2.2.10
MODx MODX Revolution=2.2.11
MODx MODX Revolution=2.2.12
Event History
Mar 11, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·07:37 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2311?
CVE-2014-2311 is classified as a high severity SQL injection vulnerability allowing attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2014-2311?
To fix CVE-2014-2311, upgrade to MODX Revolution version 2.2.13 or later.
3
What software versions are affected by CVE-2014-2311?
CVE-2014-2311 affects all versions of MODX Revolution prior to 2.2.13.
4
Can CVE-2014-2311 be exploited remotely?
Yes, CVE-2014-2311 can be exploited remotely by attackers to manipulate the database.
5
Is it necessary to patch CVE-2014-2311 immediately?
Yes, it is crucial to patch CVE-2014-2311 immediately to prevent potential data breaches.