467 matches found
CVE-2024-42616
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=remove&widget=Statistics...
CVE-2024-42609
Pligg CMS v2.0.2 is affected by a CSRF vulnerability exposed via /admin/admin_backup.php?dobackup=avatars. The connected documents confirm the vulnerability type and affected version, but do not provide an official patch details within the supplied sources. Some sources (PT-2024-30061) mention a ...
CVE-2024-42609
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=avatars...
CVE-2024-42603
Pligg CMS v2.0.2 (also referenced as Kliqqi CMS) contains a CSRF vulnerability exploitable via /admin/admin_backup.php?dobackup=clearall. The issue arises because the request is not adequately verified as originating from a trusted user, allowing an attacker to forge or induce sensitive operation...
CVE-2024-42612
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...
CVE-2024-42613
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminwidgets.php?action=install&widget=akismet...
CVE-2024-42619
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
CVE-2024-42610
Affected software: Pligg CMS v2.0.2. Vulnerability: Cross-Site Request Forgery (CSRF) via /admin/admin_backup.php?dobackup=files. The vulnerability stems from insufficient verification that requests originate from trusted users. Impact (as stated): An attacker can forge malicious requests to perf...
CVE-2024-42606
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminlog.php?clear=1...
PT-2024-30061 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability is exploited via the "/admin/admin backup.php?dobackup=avatars" API endpoint. Recommendations: For Pligg CMS version 2.0.2,...
PT-2024-30069 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered, affecting the software through the "module.php?module=karma" endpoint. This allows for malicious requests to be made on behalf of the user...
CVE-2024-42604
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/admingroup.php?mode=delete&groupid=3...
CVE-2024-42611
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF via admin/adminpage.php?linkid=1&mode=delete...
CVE-2024-42605
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/editpage.php?linkid=1...
CVE-2024-42612
Pligg CMS v2.0.2 is affected by a CSRF vulnerability that can be triggered through /admin/domain_management.php?whitelist_add. The root cause is insufficient verification of the request origin trusted user, enabling an attacker to forge malicious actions. Documented impact includes the ability to...
CVE-2024-42604
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/admingroup.php?mode=delete&groupid=3...
CVE-2024-42607
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=database...