CVE-2022-34955

CVE-2022-34955 : Pligg CMS v2.0.2 contains a time-based SQL injection vulnerability exposed via the page_size parameter in load_data_for_topusers.php. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CVE lists) with a common description and an NVD CVSS v3.1 base score of 9.8 (CRI...

CVE-2022-34955

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

CVE-2022-34955

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

Pligg CMS SQL注入漏洞

Pligg CMS is a content management system by Berteh Personal Developers. A security vulnerability exists in Pligg CMS version v2.0.2, which stems from a security issue with the pagesize parameter in loaddataforgroups.php...

PT-2022-22455 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A time-based SQL injection issue was found in Pligg CMS. The issue is related to the page size parameter at the "load data for groups.php" endpoint. Recommendations: For Pligg CMS version 2.0.2, avoid usin...

CVE-2022-34956: Improper Neutralization of Special Elements used in an SQL Command

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

Pligg CMS SQL注入漏洞

Pligg CMS is a content management system by Berteh Personal Developers. A security vulnerability exists in Pligg CMS version v2.0.2, which stems from a security issue with the pagesize parameter in loaddatafortopusers.php...

CVE-2022-34955: Improper Neutralization of Special Elements used in an SQL Command

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddatafortopusers.php...

CVE-2020-21121

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the adminupdatemodulewidgets.php file...

CVE-2020-21121

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the adminupdatemodulewidgets.php file...

Sql injection

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the adminupdatemodulewidgets.php file...

CVE-2020-21121

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the adminupdatemodulewidgets.php file...

CVE-2020-21121

The provided connected sources confirm a concrete vulnerability: Pligg CMS/Kliqqi-CMS 2.0.2 has a time-based SQL injection in admin_update_module_widgets.php via the $recordIDValue parameter. Root cause is a vulnerable SQL query construction in that file, enabling potentially unauthorized data ex...

CVE-2020-21121: Improper Neutralization of Special Elements used in an SQL Command

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the adminupdatemodulewidgets.php file...

Pligg CMS Cross Site Request Forgery (CVE-2015-6655)

A cross site request forgery vulnerability exists in Pligg CMS. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2020-25287

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admineditor.php thefile=..%2Findex.php&open=Open request...

CVE-2020-25287

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admineditor.php thefile=..%2Findex.php&open=Open request...

Design/Logic Flaw

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admineditor.php thefile=..%2Findex.php&open=Open request...

CVE-2020-25287

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admineditor.php thefile=..%2Findex.php&open=Open request...

CVE-2020-25287

Pligg 2.0.3 is affected by a remote command execution vulnerability where the template editor can edit arbitrary files. The issue arises from file editing via the admin_editor.php vector (example: the_file=..%2Findex.php&open=Open). Impact is user-controlled command execution with authenticated a...