467 matches found
Pligg login.php return Parameter Arbitrary Site Redirect
The remote host is running Pligg, an open source content management system. The installed version of Pligg contains an open redirect, in the 'return' parameter of its 'login.php' script. This could be abused to launch a phishing attack to trick users into visiting malicious sites. Note that this...
Pligg多个跨站脚本和跨站请求伪造漏洞
BUGTRAQ ID: 37185 Pligg是可以免费下载使用的开源内容管理系统。 Pligg没有正确地过滤用户提交给admin/adminconfig.php、admin/adminmodules.php、 delete.php、editlink.php、submit.php、submitgroups.php、...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Pligg CMS Detection
This host is running Pligg CMS, an open source CMS. OpenVAS Vulnerability Test $Id: pliggcmsdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ Pligg CMS Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modi...
Pligg CMS Detection
This host is running Pligg CMS, an open source CMS. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
pligg -- Cross-Site Scripting and Cross-Site Request Forgery
secunia reports: Russ McRee has discovered some vulnerabilities in Pligg, which can be exploited by malicious people to conduct cross-site scripting and request forgery attacks. Input passed via the "Referer" HTTP header to various scripts e.g. admin/adminconfig.php, admin/adminmodules.php,...
CVE-2008-7091
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to vote.php, which is not properly handled in libs/link.php; 2 id parameter to trackback.php; 3 an unspecified parameter to submit.php; 4 requestTitle...
CVE-2008-7090
Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to 1 determine the existence of arbitrary files via a .. dot dot in the $tburl variable in trackback.php, or 2 include arbitrary files via a .. dot dot in the template parameter to settemplate.php...
Sql injection
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to vote.php, which is not properly handled in libs/link.php; 2 id parameter to trackback.php; 3 an unspecified parameter to submit.php; 4 requestTitle...
Cross site scripting
Cross-site scripting XSS vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors...
Directory traversal
Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to 1 determine the existence of arbitrary files via a .. dot dot in the $tburl variable in trackback.php, or 2 include arbitrary files via a .. dot dot in the template parameter to settemplate.php...
CVE-2008-7091
CVE-2008-7091 affects Pligg 9.9 and earlier, with multiple SQL injection vulnerabilities caused by improper handling of user-supplied input across several PHP scripts (vote.php, trackback.php, submit.php, story.php, recommend.php, cloud.php, out.php, login.php, cvote.php, edit.php). Attack vector...
CVE-2008-7089
Pligg 9.9 and earlier is affected by a Cross-site scripting (XSS) vulnerability. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors. Affected component: Pligg (versions up to 9.9 or earlier...
CVE-2008-7091
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to vote.php, which is not properly handled in libs/link.php; 2 id parameter to trackback.php; 3 an unspecified parameter to submit.php; 4 requestTitle...
CVE-2008-7089
Cross-site scripting XSS vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors...
CVE-2008-7090
CVE-2008-7090 affects Pligg 9.9 and earlier. Two directory traversal flaws allow remote attackers to (1) check existence of arbitrary files via .. in trackback.php ($tb_url) and (2) include arbitrary files via .. in the template parameter to settemplate.php. Impact per sources: potential file dis...
CVE-2008-7090
Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to 1 determine the existence of arbitrary files via a .. dot dot in the $tburl variable in trackback.php, or 2 include arbitrary files via a .. dot dot in the template parameter to settemplate.php...