MODx manager - Local File Inclusion
A directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter when magic_quotes_gpc is disabled.
PoC 已收录modx_revolution
CVSS4.3EPSS 18.6%