Skip to content
Noroxi

Pluck records

5 published records for vendor pluck.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2008-3194
      28Monitor

      Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include an

      MediumCVSS 6.8Proof of conceptEPSS 3%

      pluck · pluckJul 16, 2008

    • CVE-2007-4181
      27Monitor

      PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to exe

      MediumCVSS 6.8No exploitEPSS 2%

      pluck · pluckAug 7, 2007

    • CVE-2008-3851
      22Monitor

      Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local fil

      MediumCVSS 5.0Proof of conceptEPSS 8%

      pluck · pluckAug 27, 2008

    • CVE-2007-4180
      20Monitor

      Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to read arbi

      MediumCVSS 5.0No exploitEPSS 1%

      pluck · pluckAug 7, 2007

    • CVE-2008-3574
      10Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote attackers to inject arbit

      LowCVSS 2.6Proof of conceptEPSS 2%

      pluck · pluckAug 10, 2008