File and Path Handling

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. MODx manager - Local File InclusionCVE-2010-5278Modx · 19% likely

   CWE-22

2. MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting ca…CVE-2022-26149Modx · 9.3% likely

   CWE-434

3. Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow remote attackers to obtain system director…CVE-2017-8115Modx · 2.7% likely

   CWE-22

4. MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to…CVE-2018-1000208Modx · 1.9% likely

   CWE-22

5. Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir pa…CVE-2016-10038Modx · 1.9% likely

   CWE-22

6. In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.CVE-2017-9069Modx · 1.9% likely

   CWE-434

7. Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir pa…CVE-2016-10039Modx · 1.8% likely

   CWE-22

8. Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (ak…CVE-2016-10037Modx · 1.8% likely

   CWE-22

9. In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action…CVE-2017-9067Modx · 0.8% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.