Skip to content

CVE-2017-7324 setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter.

CriticalCVSS 9.8 EPSS 2.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter.

Affected products

ProductAffected versionsFixed in
modx revolution <= 2.5.4 No fix listed

References

  • 97228 third-party-advisory vdb-entry
  • mazinahmed.net exploit technical-description third-party-advisory