CVE-2008-7090: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to 1 determine the existence of arbitrary files via a .. dot dot in the $tburl variable in trackback.php, or 2 include arbitrary files via a .. dot dot in the template parameter to settemplate.php...

CVE-2008-6968

Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

Sql injection

Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

CVE-2008-6968

Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

CVE-2008-6968

CVE-2008-6968 affects Pligg CMS 9.9.5. The vulnerability path is in submit.php, where multiple SQL injection flaws allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters. The NVD description explicitly states these parameters as injection vectors. Impa...

CVE-2008-6968: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 id parameters...

Pligg 9.9.0 (editlink.php id) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal...

Pligg 9.9.0 (editlink.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Pligg 9.9.0 editlink.php id Blind SQL Injection Exploit ========================================================= !/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? S...

Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection

!/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal [email protected] www.Schap.Org...

Pligg 9.9.0 Blind SQL Injection

!/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal [email protected] www.Schap.Org...

Pligg 9.9.5 Cross Site Request Forgery

Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...

Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass html !-- Remove this iframe from this file and place it on a site that you want to force people to vote for. Change these...

Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass

Exploit for unknown platform in category web applications ===================================================== Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass ===================================================== Written By Michael Brooks Pligg - XSRF Protection Bypass and Captcha Bypass...

Pligg CMS 9.9.5 - Cross-Site Request Forgery / Protection Bypass / Captcha Bypass

Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...

Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass

Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss";...

Pligg 9.9.5b Upload Shell / SQL Injection Exploit

!/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and converts html special chars , but ...

CVE-2008-5739

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

Sql injection

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-5739

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

CVE-2008-5739

CVE-2008-5739 : A SQL injection vulnerability exists in Pligg CMS 9.9.5 Beta, specifically in evb/check_url.php, where the url parameter is used in database queries without sufficient sanitization. This allows remote attackers to execute arbitrary SQL commands, potentially leading to data disclos...