CVE-2008-1774

CVE-2008-1774 describes an SQL injection vulnerability in editlink.php of Pligg 9.9.0, allowing remote attackers to execute arbitrary SQL commands through the id parameter. This vulnerability is documented across multiple sources (NVD listing and related CVE entries) as enabling arbitrary SQL exe...

CVE-2008-1774: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

[Full-disclosure] Pligg 9.9.0 editlink.php SQL Injection Vulnerability

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

pligg-sql.txt

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

No description provided by source. Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Pligg CMS 9.9.0 editlink.php id Remote SQL Injection Vulnerability ==================================================================== Hello, the Pligg...

Pligg CMS 9.9.0 - 'editlink.php' SQL Injection

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Pligg CMS 9.9.0 - editlink.php SQL Injection

Pligg CMS 9.9.0 - editlink.php SQL Injection Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Design/Logic Flaw

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter...

CVE-2007-5579

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter...

CVE-2007-5579

Pligg CMS 9.5 is affected by CVE-2007-5579 through login.php, where a guessable confirmation code enables password reset by an attacker knowing a username. The root cause is a predictable confirmationcode parameter used during forgotten-password flow, allowing an unauthorized password reset with ...

CVE-2007-5579

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter...

CVE-2007-5579: Undefined Security Weakness

login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter...

pligg-password.txt

Pligg critical vulnerability Concerned version : 9.5 and ? Description : Pligg is a flexible CMS based on PHP and MYSQL. To reinitialize a forgotten password, Pligg follows a classical process. A confirmation code is generated and sent by email to the concerned user mail box. The user has to foll...

Pligg critical vulnerability

Pligg critical vulnerability Concerned version : 9.5 and ? Description : Pligg is a flexible CMS based on PHP and MYSQL. To reinitialize a forgotten password, Pligg follows a classical process. A confirmation code is generated and sent by email to the concerned user mail box. The user has to foll...

Pligg CMS 9.5 - Reset Forgotten Password Security Bypass

Pligg CMS 9.5 - Reset Forgotten Password Security Bypass source: https://www.securityfocus.com/bid/24158/info Pligg is prone to a security-bypass vulnerability due to a design error when resetting forgotten passwords. An attacker may exploit this issue to reset account passwords for arbitrary use...

Pligg CMS 9.5 - Reset Forgotten Password Security Bypass

source: https://www.securityfocus.com/bid/24158/info Pligg is prone to a security-bypass vulnerability due to a design error when resetting forgotten passwords. An attacker may exploit this issue to reset account passwords for arbitrary users and then compromise a vulnerable application. This can...