4 matches found
EUVD-2026-11739
wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the checkNotificationType function. Attackers can repeatedly call the wpdiscuz-ajax.php endpoint with arbitrary postId and commentid...
Plikli CMS SQL Injection Vulnerability
Plikli CMS is a content management system CMS. A SQL injection vulnerability exists in Plikli CMS version 4.0.0, which can be exploited by a remote attacker to execute arbitrary SQL commands by sending the 'id' parameter to the joingroup.php file or the 'commentid ' parameter to the joingroup.php...
Sql injection
Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...
CVE-2005-1499
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the commentid parameter...