CVE-2017-1000067

Name of the Vulnerable Software and Affected Versions MODX Revolution versions 2.x through 2.5.6

Description The issue is caused by improper sanitization by the escape method, resulting in blind SQL injection. This allows an authenticated user to access the database and possibly escalate privileges.

Recommendations For MODX Revolution versions 2.x through 2.5.6, update to a version that includes proper sanitization to prevent SQL injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.