467 matches found
CVE-2024-42605
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/editpage.php?linkid=1...
PT-2024-30056 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability can be exploited via the "/admin/admin group.php?mode=delete&group id=3" endpoint. This allows for unauthorized action...
PT-2024-30063 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin backup.php endpoint with the dobackup parameter set to files. This allows an attacker...
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...
CVE-2024-42621
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/admineditor.php...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
PT-2024-30058 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The issue is related to the "/admin/admin log.php?clear=1" endpoint. Recommendations: For Pligg CMS version 2.0.2, update to a version that...
PT-2024-30057 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/edit page.php endpoint, specifically when the link id parameter is set to 1. This allows an...
CVE-2024-42609
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=avatars...
CVE-2024-42603
Pligg CMS v2.0.2 (also referenced as Kliqqi CMS) contains a CSRF vulnerability exploitable via /admin/admin_backup.php?dobackup=clearall. The issue arises because the request is not adequately verified as originating from a trusted user, allowing an attacker to forge or induce sensitive operation...
CVE-2024-42609
Pligg CMS v2.0.2 is affected by a CSRF vulnerability exposed via /admin/admin_backup.php?dobackup=avatars. The connected documents confirm the vulnerability type and affected version, but do not provide an official patch details within the supplied sources. Some sources (PT-2024-30061) mention a ...
PT-2024-30068 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered. The issue is related to the "/admin/admin config.php?action=save&var id=32" API endpoint. Recommendations: For Pligg CMS version 2.0.2, as a temporar...
CVE-2024-42607
CVE-2024-42607 concerns Pligg CMS v2.0.2, where a Cross-Site Request Forgery (CSRF) vulnerability is exposed via the endpoint /admin/admin_backup.php?dobackup=database. The vulnerability description is consistently reported across multiple connected sources (e.g., Red Hat CVE, CNVD, NVD, OSV, CVE...
CVE-2024-42613
Pligg CMS v2.0.2 contains a CSRF vulnerability in /admin/admin_widgets.php?action=install&widget=akismet. Root cause: the request is not adequately verified as coming from a trusted user (CNVD/Red Hat entries describe insufficient verification). Impact is high (CVE-2024-42613 CVSS 8.8) with poten...
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...
CVE-2024-42605
CVE-2024-42605 concerns Pligg CMS v2.0.2, with a Cross-Site Request Forgery (CSRF) that targets /admin/edit_page.php?link_id=1. The Red Hat/CNVD/NVD entries confirm the issue exists in Pligg CMS v2.0.2 and describe the vulnerability as CSRF without robust verification of the requester. PT-Securit...
CVE-2024-42613
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=install&widget=akismet...
PT-2024-30070 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the /admin/domain management.php endpoint with specific parameters, including id, list, and remove...
PT-2024-30059 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin backup.php endpoint with the dobackup parameter set to database. Recommendations: For...