KCFinder 2.51 vulnerability

Sems to be quite obvious: query value 'upload' is one cause.

https://forums.modx.com/thread/95047/evo-1-0-15-kcfinder-problem#dis-post-515268

Not sure, wether the changed upload script is another.

Quote from: Jako at Nov 23, 2014, 04:10 PM

Sems to be quite obvious: query value 'upload' is one cause.

https://forums.modx.com/thread/95047/evo-1-0-15-kcfinder-problem#dis-post-515268

Not sure, wether the changed upload script is another.

Is it possible to suggest an update so that the Mod_Security doesn't flag this anymore ?

I think many MODX users who are using Mod_Security as a Web Application Firewall are encountering this problem.

Quote from: sjmclean at Nov 29, 2014, 01:33 AM

Is it possible to suggest an update so that the Mod_Security doesn't flag this anymore ?

Yes, in many cases if you contact the ruleset author they will update their rules.

Mod_security isn't running on my Rackspace Cloud Site and uploads still don't work, so something else is blocking uploads. I'm not alone in this

https://github.com/modxcms/evolution/issues/371

Quote from: sparkyhd at Nov 30, 2014, 03:36 AM

Mod_security isn't running on my Rackspace Cloud Site and uploads still don't work, so something else is blocking uploads. I'm not alone in this

https://github.com/modxcms/evolution/issues/371

https://github.com/modxcms/evolution/issues/371#issuecomment-65464093