CVE-2017-9067

4.4

MEDIUMCVSS v2

Published

May 18, 2017

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.

modxcms/revolution

GitHubMODX Revolution - Content Management Framework

NVD

php

NPMAllows you to run PHP code in Node.js in various ways.

= 5.3.3NVD

php

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Handle some of the strange standards in PHP projects

= 5.3.3NVD

Security Advisories

CVE-2017-9067

Description

More on this CVE