What’s Vulnerable › Vulnerabilities

CVE-2019-1010123

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-23 · updated 2026-06-17
• Weakness: CWE-434

Description

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via /assets/components/gallery/connector.php.

Affected products

• Modx Revolution: through 2.6.4

References

• https://modx.pro/security/15912#comment-99640
• https://modx.today/posts/2018/07/critical-security-vulnerability-in-gallery-1.7.1
• https://modx.pro/security/15912#comment-99640
• https://modx.today/posts/2018/07/critical-security-vulnerability-in-gallery-1.7.1

Get alerted when CVE-2019-1010123 or the next vulnerability affects your stack