Skip to content
Noroxi

pligg records

44 published records for vendor pligg.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

44 records
  • CVE-2023-37677
    39Monitor

    Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.

    CriticalCVSS 9.8No exploitEPSS 1%

    pligg · pligg cmsJul 25, 2023

  • CVE-2022-34955
    39Monitor

    Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.ph

    CriticalCVSS 9.8No exploitEPSS 1%

    pligg · pligg cmsAug 1, 2022

  • CVE-2022-34956
    39Monitor

    Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    pligg · pligg cmsAug 1, 2022

  • CVE-2024-42607
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42617
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42616
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widg

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42613
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&wid

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42604
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42618
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42611
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42610
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42621
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42608
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42612
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42619
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whit

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42605
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42609
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42606
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2024-42603
    35Monitor

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall

    HighCVSS 8.8No exploitEPSS 0%

    pligg · pligg cmsAug 20, 2024

  • CVE-2008-7090
    33Monitor

    Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary fil

    HighCVSS 7.8Proof of conceptEPSS 8%

    pligg · pligg cmsAug 26, 2009

  • CVE-2012-2937
    31Monitor

    Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list p

    HighCVSS 7.5No exploitEPSS 2%

    pligg · pligg cmsMay 27, 2012

  • CVE-2014-9096
    31Monitor

    Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL command

    HighCVSS 7.5Proof of conceptEPSS 2%

    pligg · pligg cmsNov 26, 2014

  • CVE-2007-5579
    31Monitor

    login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowle

    HighCVSS 7.5Proof of conceptEPSS 2%

    pligg · pligg cmsOct 18, 2007

  • CVE-2008-7091
    31Monitor

    Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id para

    HighCVSS 7.5Proof of conceptEPSS 2%

    pligg · pligg cmsAug 26, 2009

  • CVE-2008-5739
    31Monitor

    SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the u

    HighCVSS 7.5Proof of conceptEPSS 2%

    pligg · pligg cmsDec 26, 2008