Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MODX Revolution 访问控制错误漏洞
Vulnerability Description
MODX Revolution是美国MODX公司的一套基于PHP的开源内容管理系统（CMS）。该系统支持在线协作、搜索引擎优化（SEO）、附加组件等。 MODX Revolution 2.6.4及之前版本中存在访问控制错误漏洞。攻击者可通过发送Web请求利用该漏洞创建带有自定义文件名称和内容的文件。
CVSS Information
N/A
Vulnerability Type
N/A