Description

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via /assets/components/gallery/connector.php.

Remediation

References

CVE-2019-1010123

Related Vulnerabilities

WordPress Plugin Limit Attempts by BestWebSoft Multiple Vulnerabilities (1.0.3)

MySQL CVE-2019-2587 Vulnerability (CVE-2019-2587)

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32028)

WordPress Plugin WP YouTube Live Cross-Site Scripting (1.8.2)

WordPress Plugin AccessPress Custom Post Type includes Backdoor [Only if downloaded via the vendor website] (1.0.8)

Severity

High

Classification

CVE-2019-1010123 CWE-434 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities