Pligg Cms Security Vulnerabilities and Issues — Pligg Cms CVE List

Lucene search

PliggPligg Cms

4 matches found

CVE•added 2009/08/26 2:24 p.m.•187 views

CVE-2008-7090

Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php.

7.8CVSS7.1AI score0.10831EPSS

CVE•added 2009/08/26 2:24 p.m.•39 views

CVE-2008-7091

Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTi...

7.5CVSS8.8AI score0.04999EPSS

CVE•added 2009/08/26 2:24 p.m.•37 views

CVE-2008-7089

Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors.

4.3CVSS5.8AI score0.03519EPSS

CVE•added 2009/08/13 4:30 p.m.•36 views

CVE-2008-6968

Multiple SQL injection vulnerabilities in submit.php in Pligg CMS 9.9.5 allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters.

7.5CVSS8.8AI score0.00128EPSS