pligg_cms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/pligg_cms/ Sun, 26 Feb 2023 09:11:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png pligg_cms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/pligg_cms/ 32 32 CVE-2008-7089 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7089/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7089/ Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors.

The post CVE-2008-7089 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors.

The post CVE-2008-7089 appeared first on CVE Vulnerability.

]]> CVE-2008-7090 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7090/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7090/ Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php.

The post CVE-2008-7090 appeared first on CVE Vulnerability.

]]> Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php.

The post CVE-2008-7090 appeared first on CVE Vulnerability.

]]> CVE-2008-7091 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7091/ Sun, 26 Feb 2023 09:11:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7091/ Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle […]

The post CVE-2008-7091 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.

The post CVE-2008-7091 appeared first on CVE Vulnerability.

]]> CVE-2008-6968 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6968/ Sun, 26 Feb 2023 09:11:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6968/ Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.

The post CVE-2008-6968 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.

The post CVE-2008-6968 appeared first on CVE Vulnerability.

]]> CVE-2008-5739 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5739/ Sun, 26 Feb 2023 09:11:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5739/ SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter.

The post CVE-2008-5739 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter.

The post CVE-2008-5739 appeared first on CVE Vulnerability.

]]> CVE-2008-3572 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3572/ Sun, 26 Feb 2023 09:10:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3572/ Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter.

The post CVE-2008-3572 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter.

The post CVE-2008-3572 appeared first on CVE Vulnerability.

]]> CVE-2008-3366 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3366/ Sun, 26 Feb 2023 09:09:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3366/ SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774.

The post CVE-2008-3366 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774.

The post CVE-2008-3366 appeared first on CVE Vulnerability.

]]> CVE-2008-1774 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1774/ Sun, 26 Feb 2023 09:09:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1774/ SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-1774 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-1774 appeared first on CVE Vulnerability.

]]> CVE-2007-5579 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-5579/ Sun, 26 Feb 2023 09:07:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-5579/ login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user’s password by calculating the confirmationcode parameter.

The post CVE-2007-5579 appeared first on CVE Vulnerability.

]]> login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user’s password by calculating the confirmationcode parameter.

The post CVE-2007-5579 appeared first on CVE Vulnerability.

]]> CVE-2022-34956 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34956/ Thu, 23 Feb 2023 05:19:33 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34956/ Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.

The post CVE-2022-34956 appeared first on CVE Vulnerability.

]]> Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.

The post CVE-2022-34956 appeared first on CVE Vulnerability.

]]>