Page 5 of 24 results (0.006 seconds)

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 4

CVE-2008-7091 – Pligg CMS 9.9.0 - Remote Code Execution

https://notcve.org/view.php?id=CVE-2008-7091

Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php. Múltiples vulnerabilidades de inyección SQL en Pligg v9.9 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través de el (1)parámetro id a vote.php, que no está manejado adecuadamente en libs/link.php; de los parámetros (2) id ao trackback.php; (3) un parámetro no especificado a submit.php; (4) la variable requestTitle en una consulta a story.php; las variables (5) requestID y (6) requestTitle en recommend.php; los parámetros(7) categoryID a cloud.php; (8) title a out.php; (9) username a login.php; (10) id a cvote.php y(11) commentid a edit.php. • https://www.exploit-db.com/exploits/6172 https://www.exploit-db.com/exploits/6173 http://www.gulftech.org/?node=research&article_id=00120-07312008 http://www.osvdb.org/50189 http://www.osvdb.org/50190 http://www.osvdb.org/50191 http://www.osvdb.org/50192 http://www.osvdb.org/50193 http://www.osvdb.org/50194 http://www.osvdb.org/50195 http://www.osvdb.org/50196 http://www.osvdb.org/50197 http://www.osvdb.org/50198 http://www.securityf • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2008-3366 – Pligg CMS 9.9.0 - 'story.php' SQL Injection

https://notcve.org/view.php?id=CVE-2008-3366

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774. Vulnerabilidad de inyección SQL en story.php en Pligg CMS Beta 9.9.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro "id". NOTA: esta puede solaparse con CVE-2008-1774. • https://www.exploit-db.com/exploits/6146 http://securityreason.com/securityalert/4063 http://www.vupen.com/english/advisories/2008/2214/references https://exchange.xforce.ibmcloud.com/vulnerabilities/44021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2

CVE-2008-1774 – Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

https://notcve.org/view.php?id=CVE-2008-1774

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerabilidad de inyección SQL en editlink.php de Pligg 9.9.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id. • https://www.exploit-db.com/exploits/5406 http://www.securityfocus.com/bid/28681 http://www.vupen.com/english/advisories/2008/1164/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41709 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2

CVE-2007-5579 – Pligg CMS 9.5 - Reset Forgotten Password Security Bypass

https://notcve.org/view.php?id=CVE-2007-5579

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter. login.php en Pligg CMS 9.5 utiliza un código de confirmación predecible al restablecer una contraseña olvidada, lo cual permite a atacantes remotos que conocen un nombre de usuario restablecerle la contraseña calculando el parámetro confirmationcode. • https://www.exploit-db.com/exploits/30088 http://archives.neohapsis.com/archives/bugtraq/2007-05/0383.html http://osvdb.org/42031 http://www.securityfocus.com/bid/24158 https://exchange.xforce.ibmcloud.com/vulnerabilities/34512 • CWE-255: Credentials Management Errors •