13 matches found
EUVD-2012-2422
Malware in sbrugna...
EUVD-2008-6245
Malware in sbrugna...
EUVD-2008-6246
Malware in sbrugna...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
PT-2024-30069 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered, affecting the software through the "module.php?module=karma" endpoint. This allows for malicious requests to be made on behalf of the user...
Kliqqi CMS 安全漏洞
Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . A cross-site request forgery vulnerability exists in Kliqqi CMS version v2.0.2, which originates from /module.php?module=karma does not adequately verify that the request comes from a trusted user, and can be exploited by an...
PiKarma - Detects Wireless Network Attacks
Detects wireless network attacks performed by KARMA module fake AP. Starts deauthentication attack for fake access points Working Principle for PiKarma Collects all the packets from Wireless Network. Probe Response Analyses all the packets in real time. If PiKarma finds more than one SSID info fr...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...
Sql injection
Multiple SQL injection vulnerabilities in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allow remote authenticated administrators to execute arbitrary SQL commands via 1 a content type or 2 a voting API value...
CVE-2008-6275
Cross-site scripting XSS vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages...
CVE-2008-6276
CVE-2008-6276 describes SQL injection vulnerabilities in the Drupal module User Karma. Affected versions are 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1. The flaws allow remote authenticated administrators to execute arbitrary SQL commands via either a content type or a voting API value. The...
CVE-2008-6275
The CVE-2008-6275 entry describes a cross-site scripting (XSS) vulnerability in the Drupal User Karma module (versions 5.x prior to 5.x-1.13 and 6.x prior to 6.x-1.0-beta1). The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified messages. The available documents c...