Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Pligg CMS 9.9.0 - Remote Code Execution

!/usr/bin/perl -w use LWP::UserAgent; use MIME::Base64; use Digest::MD5 qwmd5hex; use Getopt::Std; getopts'h:', %args; print "\n"; print " Pligg new; $http-agent'Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1 Gecko/2008070208 Firefox/3.0.1'; $http-envproxy; cookiejar; my $host =...

Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection

GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this advisory. Arbitrar...

Pligg <= 9.9.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================ Pligg new; $http-agent'Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1 Gecko/2008070208 Firefox/3.0.1'; $http-envproxy; cookiejar; my $host = $args'h' || usage; Host flag. Specify the...

Pligg CMS 9.9.0 (story.php id) Remote SQL Injection Vulnerability

No description provided by source. || | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK :...

Pligg CMS 9.9.0 - 'story.php' SQL Injection

|| | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK : Powered By Pligg | Legal: License...

Pligg CMS 9.9.0 (story.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Pligg CMS 9.9.0 story.php id Remote SQL Injection Vulnerability ================================================================= || | | Pligg Beta 9.9.0 id Remote SQL...

Pligg CMS 9.9.0 - story.php SQL Injection

Pligg CMS 9.9.0 - story.php SQL Injection || | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | |...

pliggcms-sql.txt

|| | | Pligg Beta 9.9.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.pligg.com/ | | DorK : Powered By Pligg | Legal: License...

Sql injection

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1774

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1774

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1774

CVE-2008-1774 describes an SQL injection vulnerability in editlink.php of Pligg 9.9.0, allowing remote attackers to execute arbitrary SQL commands through the id parameter. This vulnerability is documented across multiple sources (NVD listing and related CVE entries) as enabling arbitrary SQL exe...

[Full-disclosure] Pligg 9.9.0 editlink.php SQL Injection Vulnerability

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

No description provided by source. Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

pligg-sql.txt

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 - editlink.php SQL Injection

Pligg CMS 9.9.0 - editlink.php SQL Injection Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Pligg CMS 9.9.0 editlink.php id Remote SQL Injection Vulnerability ==================================================================== Hello, the Pligg...

Design/Logic Flaw

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter...