Pligg XSS and SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+13D' &search=on&advancesearch= Search...

Pligg CMS 1.1.3 - range SQL Injection

Pligg CMS 1.1.3 - range SQL Injection source: https://www.securityfocus.com/bid/45578/info Pligg CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Pligg CMS 1.1.3 - 'range' SQL Injection

source: https://www.securityfocus.com/bid/45578/info Pligg CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Pligg 1.1.2 Cross Site Scripting / SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

Pligg 1.1.2 Blind SQL Injection and XSS Vulnerabilities

Exploit for php platform in category web applications Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

Pligg CMS 1.1.2 - Blind SQL Injection Cross-Site Scripting

Pligg CMS 1.1.2 - Blind SQL Injection Cross-Site Scripting Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

Pligg CMS 1.1.2 - Blind SQL Injection / Cross-Site Scripting

Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search +&sgroup=on&stags=0&slink=on&scategory=on&scomments=0&suser=0 XSS:...

Pligg 1.1.3 SQL Injection

By Dr.NeT -Abdullah hacker team Title Pligg 1.1.3 SQL injection Vulnerabilities Language Php Download http://www.pligg.com/download.php Version 1.1.3 date 2010/12/24 info Dr.NeT @ Abdullah hacker team : [email protected] Exploit : http://localhost/cloud.php?range=SQL Admin cp :...

Pligg CMS 1.1.2 CSRF Reinstall admin login Vulnerability

Exploit for php platform in category web applications ======================================================== Pligg CMS 1.1.2 CSRF Reinstall admin login Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1...

Pligg 1.0.4 SQL Injection

While beta testing the latest version of Acunetix WVS v7, we found a large number of security vulnerabilities in various web applications. In the following days we will publish some of these vulnerabilities. Note that we will not publish vulnerabilities found in applications that are not commonly...

Pligg CMS 1.0.4 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities...

CVE-2010-3013

SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577...

CVE-2010-2577

Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to 1 storyrss.php or 2 story.php...

Sql injection

Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to 1 storyrss.php or 2 story.php...

Sql injection

SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577...

CVE-2010-2577

Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to 1 storyrss.php or 2 story.php...

CVE-2010-3013

CVE-2010-3013 is a SQL injection vulnerability in Pligg before 1.1.1, caused by unsafely handling the role parameter in groupadmin.php. The issue is exploitable remotely and allows an attacker to inject arbitrary SQL commands. This CVE is distinct from CVE-2010-2577. Connected sources confirm the...

CVE-2010-2577

Pligg CMS prior to version 1.1.1 contains multiple SQL injection vulnerabilities. Specifically, the title parameter in storyrss.php and story.php is unsafely handled, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper input handling leads to SQL injection. Affected ...

CVE-2010-3013

SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577...