517 matches found
CVE-2024-42612
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...
CVE-2024-42621
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/admineditor.php...
CVE-2024-42617
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminconfig.php?action=save&varid=32...
CVE-2024-42603
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...
CVE-2024-42617
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminconfig.php?action=save&varid=32...
CVE-2024-42609
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=avatars...
PT-2024-30065 · Pligg Cms · Pligg Cms
Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the "/admin/domain management.php?whitelist add" API endpoint. Recommendations: For Pligg CMS version...
CVE-2024-42619
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?id=0&list=whitelist&remove=pligg.com...
CVE-2024-42603
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...
CVE-2024-42606: Cross-Site Request Forgery (CSRF)
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminlog.php?clear=1...
CVE-2024-42603: Cross-Site Request Forgery (CSRF)
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=clearall...
CVE-2024-42608
Pligg CMS v2.0.2 is affected by a Cross-Site Request Forgery (CSRF) vulnerability on /admin/submit_page.php. The issue is described across multiple sources (NVD/Red Hat/CNVD/CNNVD) as CSRF in Pligg CMS, enabling a forged request to perform sensitive operations without adequate request verificatio...
CVE-2024-42618
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...
CVE-2024-42607
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=database...
CVE-2024-42607: Cross-Site Request Forgery (CSRF)
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/adminbackup.php?dobackup=database...
CVE-2024-42611
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF via admin/adminpage.php?linkid=1&mode=delete...
CVE-2024-42611
Pligg CMS v2.0.2 contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via admin/admin_page.php?link_id=1&mode=delete. The issue arises because requests to that endpoint are not adequately verified as coming from a trusted user, enabling an attacker to forge malicious actions on ...
CVE-2024-42617
CVE-2024-42617 affects Pligg CMS v2.0.2 with a Cross-Site Request Forgery (CSRF) vulnerability in the admin API: /admin/admin_config.php?action=save&var_id=32. Multiple sources (including Red Hat and CNVD) corroborate the CSRF issue; an accompanying entry lists a potential PoC/exploitation path. ...