326 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...
CVE-2015-6655
Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...
CVE-2015-6655
CVE-2015-6655 affects Pligg CMS 2.0.2. A Cross-Site Request Forgery in admin/admin_users.php lets an attacker add an administrator by forging requests, hijacking admin authentication. Public-facing details show PoCs/exploits (e.g., Exploit-DB entry) demonstrating/add-admin CSRF behavior. The avai...
CVE-2015-6655
Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...
Pligg CMS 2.0.2 CSRF漏洞
创建一个新文件，然后写入一个web后门，拿到webshell. 我们可以用另外一个方法也是可以用来getshell，先利用第一个漏洞编辑站点目录index.php，接着我们编辑保存下。 然后运保存成功后，查看index.php，然后就生成了test.php文件...
Pligg CMS 2.0.2 Cross Site Request Forgery
Admin input name="password" type="text" class="form-control" id="password" value="hacker123" onchange="ch...
Pligg CMS 2.0.2 - CSRF Add Admin Exploit
Exploit for php platform in category web applications Admin input name="password" type="text" class="form-control" id="password" value="hack...
Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)
Pligg CMS 2.0.2 - Cross-Site Request Forgery Add Admin Admin input name="password" type="text" class="form-control" id="password" value="hacker123" onchange="checkPasswordthis.va...
Pligg CMS 2.0.2 - Cross-Site Request Forgery (Add Admin)
Admin...
Pligg CMS 2.0.2 - Arbitrary Code Execution
Pligg CMS 2.0.2 - Arbitrary Code Execution Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpec...
Pligg CMS 2.0.2 - Arbitrary Code Execution Exploit
Exploit for php platform in category web applications Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- textarea type="hidden"id="textarea-1" name="pageconten...
Pligg CMS 2.0.2 - Arbitrary Code Execution
Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpecho ' Hacked '; /php /textare...
Pligg CMS 2.0.2 Open Redirect
Exploit Title: Pligg CMS adminlogin.php Open Redirect Vulnerability Google Dork: N/A Date: 2015/8/18 Exploit Author: Arash Khazaei Vendor Homepage: pligg.com Software Link: https://github.com/Pligg/pligg-cms/releases/download/2.0.2/2.0.2.zip Version: 2.0.2 Last Version Tested on: Kali , Iceweasel...
Pligg CMS 'dmin_page.php' HTML Injection Vulnerability
Pligg CMS is a content management system. An input validation vulnerability exists in Pligg CMS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is viewe...
Pligg CMS -- XSS Vulnerability
Netsparker reports: Proof of Concept URL for XSS in Pligg CMS: Page: groups.php Parameter Name: keyword Parameter Type: GET Attack Pattern: http://example.com/pligg-cms-2.0.2/groups.php?view=search&keyword='+alert0x000D82+' For more information on cross-site scripting vulnerabilities read the...
Pligg CMS 2.0.2 - Stored XSS
Hi Team, Affected Vendor: http://pligg.com/ Date: 23/04/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Persistent XSS Tested on: Windows 8.1 Product: Pligg CMS Version: 2.0.2 Tested Link: http://localhost/pligg/admin/adminpage.php Description: Pligg CMS is a content management...
Pligg CMS 2.0.2 Cross Site Scripting
Hi Team, Affected Vendor: http://pligg.com/ Date: 23/04/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Persistent XSS Tested on: Windows 8.1 Product: Pligg CMS Version: 2.0.2 Tested Link: http://localhost/pligg/admin/adminpage.php Description: Pligg CMS is a content management...
CVE-2014-9096
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...
Sql injection
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...