NoSQL injection In modx/revolution
Description
MODX Revolution blind SQL injection MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 2.6.0 |
Aliases
1. 2. 3. 4.
References
1. 2.