Show filters
43 Total Results
Displaying 21-30 of 43
Sort by:
Attacker Value
Unknown
CVE-2012-2435
Disclosure Date: May 27, 2012 (last updated October 04, 2023)
Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.
0
Attacker Value
Unknown
CVE-2012-2936
Disclosure Date: May 27, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.
0
Attacker Value
Unknown
CVE-2012-2436
Disclosure Date: May 27, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module.
0
Attacker Value
Unknown
CVE-2012-2937
Disclosure Date: May 27, 2012 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.
0
Attacker Value
Unknown
CVE-2011-5023
Disclosure Date: December 29, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-2011-3986.
0
Attacker Value
Unknown
CVE-2011-5022
Disclosure Date: December 29, 2011 (last updated October 04, 2023)
SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.
0
Attacker Value
Unknown
CVE-2011-3986
Disclosure Date: November 03, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-3794
Disclosure Date: September 24, 2011 (last updated October 04, 2023)
Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files.
0
Attacker Value
Unknown
CVE-2010-2577
Disclosure Date: August 16, 2010 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to (1) storyrss.php or (2) story.php.
0
Attacker Value
Unknown
CVE-2010-3013
Disclosure Date: August 16, 2010 (last updated October 04, 2023)
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
0
