İçeriğe atla
Noroxi

pligg kayıtları

pligg üreticisine ait 44 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

44 kayıt
  • CVE-2023-37677
    39İzleyin

    Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.

    KritikCVSS 9,8İstismar yokEPSS %1

    pligg · pligg cms25 Tem 2023

  • CVE-2022-34955
    39İzleyin

    Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.ph

    KritikCVSS 9,8İstismar yokEPSS %1

    pligg · pligg cms1 Ağu 2022

  • CVE-2022-34956
    39İzleyin

    Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    pligg · pligg cms1 Ağu 2022

  • CVE-2024-42607
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42617
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42616
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widg

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42613
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&wid

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42604
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42618
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42611
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42610
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42621
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42608
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42612
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42619
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?id=0&list=whit

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42605
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42609
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42606
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2024-42603
    35İzleyin

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall

    YüksekCVSS 8,8İstismar yokEPSS %0

    pligg · pligg cms20 Ağu 2024

  • CVE-2008-7090
    33İzleyin

    Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary fil

    YüksekCVSS 7,8Kavram kanıtıEPSS %8

    pligg · pligg cms26 Ağu 2009

  • CVE-2012-2937
    31İzleyin

    Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list p

    YüksekCVSS 7,5İstismar yokEPSS %2

    pligg · pligg cms27 May 2012

  • CVE-2014-9096
    31İzleyin

    Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL command

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    pligg · pligg cms26 Kas 2014

  • CVE-2007-5579
    31İzleyin

    login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowle

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    pligg · pligg cms18 Eki 2007

  • CVE-2008-7091
    31İzleyin

    Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id para

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    pligg · pligg cms26 Ağu 2009

  • CVE-2008-5739
    31İzleyin

    SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the u

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    pligg · pligg cms26 Ara 2008