467 matches found
CVE-2024-42609
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=avatars...
CVE-2024-42603
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...
CVE-2024-42621
Affected software: Pligg CMS v2.0.2 (also referred to as Kliqqi CMS in related records). Vulnerability type & vector: Cross-Site Request Forgery (CSRF) via the /admin/admin_editor.php endpoint. Root cause: Insufficient verification of the request origin/authorization allows an attacker to forge r...
CVE-2024-42603
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...
CVE-2024-42612
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...
CVE-2024-42612
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...
CVE-2024-42607
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=database...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
CVE-2024-42617
CVE-2024-42617 affects Pligg CMS v2.0.2 with a Cross-Site Request Forgery (CSRF) vulnerability in the admin API: /admin/admin_config.php?action=save&var_id=32. Multiple sources (including Red Hat and CNVD) corroborate the CSRF issue; an accompanying entry lists a potential PoC/exploitation path. ...
CVE-2024-42618
CVE-2024-42618 affects Pligg CMS (also referred to as Kliqqi CMS) v2.0.2. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered via the endpoint /module.php?module=karma, allowing an attacker to forge a request on behalf of a logged-in user. No explicit exploit details ar...
PT-2024-30065 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the "/admin/domain management.php?whitelist add" API endpoint. Recommendations: For Pligg CMS version...
CVE-2024-42604
Pligg CMS v2.0.2 contains a CSRF vulnerability in the admin_group.php endpoint (mode=delete&group_id=3). The flaw arises from insufficient verification of the requesting user, allowing an attacker to forge state-changing requests. Several connected reports (including Red Hat, CNVD, CNVD CNVD, OSV...
CVE-2024-42608
Pligg CMS v2.0.2 is affected by a Cross-Site Request Forgery (CSRF) vulnerability on /admin/submit_page.php. The issue is described across multiple sources (NVD/Red Hat/CNVD/CNNVD) as CSRF in Pligg CMS, enabling a forged request to perform sensitive operations without adequate request verificatio...
CVE-2024-42619
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...
CVE-2024-42606
Pligg CMS v2.0.2 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the admin_log.php?clear=1 endpoint. Root cause: requests are not adequately verified as coming from trusted users, enabling forged operations on behalf of victims. Public descriptions across Red Hat,...
CVE-2024-42609
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=avatars...
CVE-2024-42619
Pligg CMS v2.0.2 contains a CSRF vulnerability in /admin/domain_management.php?id=0&list=whitelist&remove=pligg.com. The issue stems from insufficient verification, enabling forged requests to manipulate the whitelist. CVSSv3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 8.8, HIGH). Connect...
CVE-2024-42605
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/editpage.php?linkid=1...