VYPR
← All advisories
High severity7.5OSV Advisory· Published Jul 13, 2018· Updated Jun 17, 2026

CVE-2018-1000208

CVE-2018-1000208

Description

MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to be exploitable via web request via security/login processor. This vulnerability appears to have been fixed in pull 13980.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Modxcms/RevolutionOSV
    Range: v2.0.1-pl, v2.0.3-pl, v2.0.4-pl, …
  • Modx/Revolution2 versions
    cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*range: <=2.6.4
    • (no CPE)range: <=2.6.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.