326 matches found
Cross-site Scripting (XSS) Vulnerability in Pligg CMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in Pligg CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Pligg CMS The vulnerability exists due to input sanitation error in the "search" parameter in...
Pligg CMS 1.1.2 (status) Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Pligg CMS 'status' Parameter SQL Injection Vulnerability Pligg CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...
Pligg CMS (story.php?id) SQL Injection Vulnerability
No description provided by source. / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...
Pligg CMS 1.0.4 SQL Injection
/ ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor : http://www.pligg.com/ Download:...
Pligg CMS 1.0.4 - 'story.php' SQL Injection
/ ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor : http://www.pligg.com/ Download:...
Pligg CMS 1.0.4 - story.php SQL Injection
Pligg CMS 1.0.4 - story.php SQL Injection / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendo...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Pligg CMS Detection
This host is running Pligg CMS, an open source CMS. OpenVAS Vulnerability Test $Id: pliggcmsdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ Pligg CMS Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modi...
Pligg CMS Detection
This host is running Pligg CMS, an open source CMS. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-6968
Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...
Sql injection
Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...
CVE-2008-6968
Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...
CVE-2008-6968
CVE-2008-6968 affects Pligg CMS 9.9.5. The vulnerability path is in submit.php, where multiple SQL injection flaws allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters. The NVD description explicitly states these parameters as injection vectors. Impa...
Pligg 9.9.0 (editlink.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Pligg 9.9.0 editlink.php id Blind SQL Injection Exploit ========================================================= !/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? S...
Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection
!/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal [email protected] www.Schap.Org...
Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass
Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss";...
Pligg CMS 9.9.5 - Cross-Site Request Forgery / Protection Bypass / Captcha Bypass
Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...