517 matches found
Pligg CMS 2.0.2 - Arbitrary Code Execution
Pligg CMS 2.0.2 - Arbitrary Code Execution Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpec...
Pligg CMS 2.0.2 - Arbitrary Code Execution Exploit
Exploit for php platform in category web applications Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- textarea type="hidden"id="textarea-1" name="pageconten...
Pligg CMS 2.0.2 - Arbitrary Code Execution
Hacked '; Code You Can Customize Exploit For Your Self . Exploit : -- phpecho ' Hacked '; /php /textare...
Pligg CMS 2.0.2 Open Redirect
Exploit Title: Pligg CMS adminlogin.php Open Redirect Vulnerability Google Dork: N/A Date: 2015/8/18 Exploit Author: Arash Khazaei Vendor Homepage: pligg.com Software Link: https://github.com/Pligg/pligg-cms/releases/download/2.0.2/2.0.2.zip Version: 2.0.2 Last Version Tested on: Kali , Iceweasel...
Pligg CMS 'dmin_page.php' HTML Injection Vulnerability
Pligg CMS is a content management system. An input validation vulnerability exists in Pligg CMS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is viewe...
Pligg CMS -- XSS Vulnerability
Netsparker reports: Proof of Concept URL for XSS in Pligg CMS: Page: groups.php Parameter Name: keyword Parameter Type: GET Attack Pattern: http://example.com/pligg-cms-2.0.2/groups.php?view=search&keyword='+alert0x000D82+' For more information on cross-site scripting vulnerabilities read the...
Pligg CMS 2.0.2 - Stored XSS
Hi Team, Affected Vendor: http://pligg.com/ Date: 23/04/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Persistent XSS Tested on: Windows 8.1 Product: Pligg CMS Version: 2.0.2 Tested Link: http://localhost/pligg/admin/adminpage.php Description: Pligg CMS is a content management...
Pligg CMS 2.0.2 Cross Site Scripting
Hi Team, Affected Vendor: http://pligg.com/ Date: 23/04/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Persistent XSS Tested on: Windows 8.1 Product: Pligg CMS Version: 2.0.2 Tested Link: http://localhost/pligg/admin/adminpage.php Description: Pligg CMS is a content management...
CVE-2014-9096
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...
Sql injection
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...
CVE-2014-9096
CVE-2014-9096 : In Pligg CMS
CVE-2014-9096
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...
CVE-2014-9096: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...
Pligg 2.0.1 - Multiple Vulnerabilities
Pligg versions 2.0.1 and below suffer from remote SQL injection, path disclosure, and remote command execution vulnerabilities. !/usr/bin/python Exploit Title: Pligg useremail; 62. $subject = $mainsmarty-getconfigvars"PLIGGVisualName".' '.$mainsmarty-getconfigvars"PLIGGPassEmailSubject"; 63. 64...
Pligg 2.0.1 SQL Injection / Command Execution
!/usr/bin/python Exploit Title: Pligg useremail; 62. $subject = $mainsmarty-getconfigvars"PLIGGVisualName".' '.$mainsmarty-getconfigvars"PLIGGPassEmailSubject"; 63. 64. $body = sprintf 65. $mainsmarty-getconfigvars"PLIGGPassEmailPassBody", 66. $mainsmarty-getconfigvars"PLIGGVisualName", 67...
Pligg CMS 2.0.1 - Multiple Vulnerabilities
Pligg CMS 2.0.1 - Multiple Vulnerabilities !/usr/bin/python Exploit Title: Pligg useremail; 62. $subject = $mainsmarty-getconfigvars"PLIGGVisualName".' '.$mainsmarty-getconfigvars"PLIGGPassEmailSubject"; 63. 64. $body = sprintf 65. $mainsmarty-getconfigvars"PLIGGPassEmailPassBody", 66...
Pligg CMS 2.0.1 - Multiple Vulnerabilities
!/usr/bin/python Exploit Title: Pligg useremail; 62. $subject = $mainsmarty-getconfigvars"PLIGGVisualName".' '.$mainsmarty-getconfigvars"PLIGGPassEmailSubject"; 63. 64. $body = sprintf 65. $mainsmarty-getconfigvars"PLIGGPassEmailPassBody", 66. $mainsmarty-getconfigvars"PLIGGVisualName", 67...
Pligg 9.5 Reset Forgotten Password Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24158/info Pligg is prone to a security-bypass vulnerability due to a design error when resetting forgotten passwords. An attacker may exploit this issue to reset account passwords for arbitrary users and then compromise ...
Pligg 9.9.5 'CAPTCHA' Registration Automation Security Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/30518/info Pligg is prone to a security-bypass weakness. Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead to other attacks. Pligg 9.9.5 i...