326 matches found
CVE-2024-42607
CVE-2024-42607 concerns Pligg CMS v2.0.2, where a Cross-Site Request Forgery (CSRF) vulnerability is exposed via the endpoint /admin/admin_backup.php?dobackup=database. The vulnerability description is consistently reported across multiple connected sources (e.g., Red Hat CVE, CNVD, NVD, OSV, CVE...
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...
CVE-2024-42605
CVE-2024-42605 concerns Pligg CMS v2.0.2, with a Cross-Site Request Forgery (CSRF) that targets /admin/edit_page.php?link_id=1. The Red Hat/CNVD/NVD entries confirm the issue exists in Pligg CMS v2.0.2 and describe the vulnerability as CSRF without robust verification of the requester. PT-Securit...
PT-2024-30070 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the /admin/domain management.php endpoint with specific parameters, including id, list, and remove...
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...
CVE-2024-42613
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=install&widget=akismet...
CVE-2024-42621
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/admineditor.php...
PT-2024-30056 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability can be exploited via the "/admin/admin group.php?mode=delete&group id=3" endpoint. This allows for unauthorized action...
PT-2024-30058 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The issue is related to the "/admin/admin log.php?clear=1" endpoint. Recommendations: For Pligg CMS version 2.0.2, update to a version that...
PT-2024-30059 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin backup.php endpoint with the dobackup parameter set to database. Recommendations: For...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
PT-2024-30063 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/admin backup.php endpoint with the dobackup parameter set to files. This allows an attacker...
CVE-2024-42605
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/editpage.php?linkid=1...
CVE-2024-42603
Pligg CMS v2.0.2 (also referenced as Kliqqi CMS) contains a CSRF vulnerability exploitable via /admin/admin_backup.php?dobackup=clearall. The issue arises because the request is not adequately verified as originating from a trusted user, allowing an attacker to forge or induce sensitive operation...
CVE-2024-42609
Pligg CMS v2.0.2 is affected by a CSRF vulnerability exposed via /admin/admin_backup.php?dobackup=avatars. The connected documents confirm the vulnerability type and affected version, but do not provide an official patch details within the supplied sources. Some sources (PT-2024-30061) mention a ...
CVE-2024-42612
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...
CVE-2024-42613
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=install&widget=akismet...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...