CVEvulnerability
CVE-2008-5942
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-01-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939.
Affected configurations
• modxcms modxcms (<= 0.9.6.2)
• modxcms modxcms 0.9.0
• modxcms modxcms 0.9.1
• modxcms modxcms 0.9.2.1
• modxcms modxcms 0.9.5
• modxcms modxcms 0.9.6
• modxcms modxcms 0.9.6.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvn.jp/en/jp/JVN10170564/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000003.html jvndb.jvn.jp
- http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt svn.modxcms.com
- http://www.securityfocus.com/bid/33184 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48184 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN10170564/index.html jvn.jp
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000003.html jvndb.jvn.jp
- http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt svn.modxcms.com
- http://www.securityfocus.com/bid/33184 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48184 exchange.xforce.ibmcloud.com