Security Advisory
CVE-2016-10037
7.3
HIGH
Vulnerability Description
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, related to browser/directory/getlist.
Published Date
December 24, 2016
Official Source
NIST NVD Advisory