CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2008-1774 – Pligg CMS 9.9.0 - 'editlink.php' SQL Injection
https://notcve.org/view.php?id=CVE-2008-1774
SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerabilidad de inyección SQL en editlink.php de Pligg 9.9.0, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id. • https://www.exploit-db.com/exploits/5406 http://www.securityfocus.com/bid/28681 http://www.vupen.com/english/advisories/2008/1164/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41709 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2CVE-2007-5579 – Pligg CMS 9.5 - Reset Forgotten Password Security Bypass
https://notcve.org/view.php?id=CVE-2007-5579
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter. login.php en Pligg CMS 9.5 utiliza un código de confirmación predecible al restablecer una contraseña olvidada, lo cual permite a atacantes remotos que conocen un nombre de usuario restablecerle la contraseña calculando el parámetro confirmationcode. • https://www.exploit-db.com/exploits/30088 http://archives.neohapsis.com/archives/bugtraq/2007-05/0383.html http://osvdb.org/42031 http://www.securityfocus.com/bid/24158 https://exchange.xforce.ibmcloud.com/vulnerabilities/34512 • CWE-255: Credentials Management Errors •