CVE-2008-5739

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-5739

CVE-2008-5739 : A SQL injection vulnerability exists in Pligg CMS 9.9.5 Beta, specifically in evb/check_url.php, where the url parameter is used in database queries without sufficient sanitization. This allows remote attackers to execute arbitrary SQL commands, potentially leading to data disclos...

Pligg CMS 9.9.5 - CAPTCHA Registration Automation Security Bypass

Pligg CMS 9.9.5 - CAPTCHA Registration Automation Security Bypass source: https://www.securityfocus.com/bid/30518/info Pligg is prone to a security-bypass weakness. Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead...

Pligg CMS 9.9.5 - 'CAPTCHA' Registration Automation Security Bypass

source: https://www.securityfocus.com/bid/30518/info Pligg is prone to a security-bypass weakness. Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead to other attacks. Pligg 9.9.5 is vulnerable; other versions may...

CVE-2008-3366

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...

Sql injection

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...

CVE-2008-3366

CVE-2008-3366 is a SQL injection vulnerability affecting Pligg CMS Beta 9.9.0 where the id parameter in story.php can be exploited to execute arbitrary SQL commands. The issue is documented in multiple feeds (NVD/NIST entry and CVE records) and is potentially related to CVE-2008-1774 (editlink.ph...

CVE-2008-3366

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...

Pligg CMS 9.9.0 - Remote Code Execution

!/usr/bin/perl -w use LWP::UserAgent; use MIME::Base64; use Digest::MD5 qwmd5hex; use Getopt::Std; getopts'h:', %args; print "\n"; print " Pligg new; $http-agent'Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1 Gecko/2008070208 Firefox/3.0.1'; $http-envproxy; cookiejar; my $host =...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection

GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this advisory. Arbitrar...

Pligg CMS 9.9.0 (story.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Pligg CMS 9.9.0 story.php id Remote SQL Injection Vulnerability ================================================================= || | | Pligg Beta 9.9.0 id Remote SQL...

Pligg CMS 9.9.0 - 'story.php' SQL Injection

|| | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK : Powered By Pligg | Legal: License...

Pligg CMS 9.9.0 (story.php id) Remote SQL Injection Vulnerability

No description provided by source. || | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK :...

pligg-sql.txt

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

No description provided by source. Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Pligg CMS 9.9.0 editlink.php id Remote SQL Injection Vulnerability ==================================================================== Hello, the Pligg...

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 - editlink.php SQL Injection

Pligg CMS 9.9.0 - editlink.php SQL Injection Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Design/Logic Flaw

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter...