CVE-2016-10039

HIGH 7.3CVE-2016-10039 · Published 24/12/2016 · updated 17/06/2026

In short

CVE-2016-10039 is a HIGH (CVSS 7.3) vulnerability affecting modx revolution (modx).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.0% of all vulnerabilities.
Fix: update to 2.5.2 or later.

Package	Affected versions	Patched versions
modx revolution modx	`< 2.5.2`	`2.5.2`

Description

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles.

References

securityfocus.com/bid/95096 · Third Party Advisory
modxcms/revolution#13177 · Patch
raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt · Release Notes

More vulnerabilities in modx revolution

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

modx revolution

modx

< 2.5.2

2.5.2

More vulnerabilities in modx revolution

See all →