PT-2022-22454

Name of the Vulnerable Software and Affected Versions Pligg CMS version 2.0.2 Description A time-based SQL injection issue was found in Pligg CMS via the page size parameter at the "load data for topusers.php" endpoint. Recommendations For Pligg CMS version 2.0.2, consider restricting access to t...

CVE-2008-6189

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

Sql injection

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...

GForge top/topusers.php offset Parameter SQL Injection

The remote host is running GForge, an open source, web-based project management and collaboration software. The installed version of GForge fails to sanitize user-supplied input to the 'offset' parameter in the 'top/topusers.php' script before using it in a database query. Regardless of PHP's...