CVE-2018-19414

CVE-2018-19414 describes multiple XSS vulnerabilities in Plikli CMS 4.0.0 . The issues allow remote attackers to inject arbitrary web script/HTML via (1) the keyword parameter to groups.php, (2) the username parameter to login.php, or (3) the date parameter to search.php. The incident is document...

CVE-2018-19415

The CVE-2018-19415 entry describes SQL injection vulnerabilities in Plikli CMS 4.0.0. According to connected documents, remote attackers can execute arbitrary SQL commands by supplying crafted input in (1) id to join_group.php and (2) comment_id to story.php. The root cause is improper handling o...