CVE-2014-9096

Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...

Pligg CMS 2.0.1 - Multiple Vulnerabilities

Pligg CMS 2.0.1 - Multiple Vulnerabilities !/usr/bin/python Exploit Title: Pligg useremail; 62. $subject = $mainsmarty-getconfigvars"PLIGGVisualName".' '.$mainsmarty-getconfigvars"PLIGGPassEmailSubject"; 63. 64. $body = sprintf 65. $mainsmarty-getconfigvars"PLIGGPassEmailPassBody", 66...

Pligg 1.1.4 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Pligg = 1.1.4 SQL injection Date: 03/23/2011 Author: Null-0x00 Software Link: http://pligg.com/ Version: = 1.1.4 Websites: zenk-security.com & hackerzvoice.net Description An SQL Injection has been found on /rsssearch.php in pligg CMS 1.1.4. Prior...

Pligg CMS (story.php?id) 1.0.4 - SQL Injection Vulnerability

No description provided by source. / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...

Pligg CMS 2.0.0rc2 - CSRF File Creation Vulnerability

No description provided by source. --------------------------------------------------- Exploit Title: Pligg CMS - CSRF Vulnerability Author: DaOne Vendor Homepage: http://pligg.com/ Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip Category: webapps/php Version: 2.0.0rc2 + ol...

Pligg CMS 2.0.0rc2 Cross Site Request Forgery

--------------------------------------------------- Exploit Title: Pligg CMS - CSRF Vulnerability Author: DaOne Vendor Homepage: http://pligg.com/ Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip Category: webapps/php Version: 2.0.0rc2 + old versions...

Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery (File Creation)

--------------------------------------------------- Exploit Title: Pligg CMS - CSRF Vulnerability Author: DaOne Vendor Homepage: http://pligg.com/ Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip Category: webapps/php Version: 2.0.0rc2 + old versions...

Pligg CMS 2.0.0rc2 - CSRF File Creation Vulnerability

Exploit for php platform in category web applications -Create File by CSRF Exploit- " 0day.today 2018-02-15...

Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery (File Creation)

Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery File Creation --------------------------------------------------- Exploit Title: Pligg CMS - CSRF Vulnerability Author: DaOne Vendor Homepage: http://pligg.com/ Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip Category:...

Pligg CMS 0.9 / 1.x Command Execution

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

Multiple vulnerabilities in Pligg CMS

Advisory ID: HTB23089 Product: Pligg CMS Vendor: Pligg, LLC. Vulnerable Versions: 1.2.1 and probably prior Tested Version: 1.2.1 Vendor Notification: 25 April 2012 Vendor Patch: 18 May 2012 Public Disclosure: 23 May 2012 Vulnerability Type: Local File Inclusion, Cross-Site Scripting XSS CVE...

CVE-2012-2436

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...

CVE-2012-2937

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 list parameter in a move action to admin/adminindex.php, 2 display parameter in a minimize action to admin/adminindex.php, 3 enabled parameter to admin/adminusers.ph...

CVE-2012-2435

Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the captcha parameter to module.php, as demonstrated by cross-site request forgery CSRF attacks...

CVE-2012-2936

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 page parameter to a admin/admincomments.php or b admin/adminlinks.php; or list parameter in a 3 move or 4 minimize action to c...

Directory traversal

Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the captcha parameter to module.php, as demonstrated by cross-site request forgery CSRF attacks...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 user or 2 page parameter to a admin/admincomments.php or b admin/adminlinks.php; or list parameter in a 3 move or 4 minimize action to c...

Sql injection

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 list parameter in a move action to admin/adminindex.php, 2 display parameter in a minimize action to admin/adminindex.php, 3 enabled parameter to admin/adminusers.ph...

CVE-2012-2436

Multiple cross-site scripting XSS vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary parameter in a move or 2 minimize action to admin/adminindex.php; 3 the karmausername parameter to module.php in the karma module; 4 q1low, ...