Description

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.

Remediation

References

CVE-2022-26149

Related Vulnerabilities

WordPress Plugin Verify Google Webmaster Tools Unspecified Vulnerability (1.3)

Moodle Improper Authentication Vulnerability (CVE-2013-2245)

WordPress Plugin RestroPress-Online Food Ordering System Cross-Site Request Forgery (2.8.2)

Oracle Database Server CVE-2008-2590 Vulnerability (CVE-2008-2590)

WordPress Plugin User Avatar Unspecified Vulnerability (1.4.6)

Severity

High

Classification

CVE-2022-26149 CWE-434 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities