UpHeron
All vulnerabilities

Servers and applications

CVE-2017-9067

In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.

Severity
High 7.0
Published
18 May 2017
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • Version 5.3.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-9067
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-9067