Filtered by vendor Pligg
Subscribe
Total
42 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-1774 | 1 Pligg | 1 Pligg Cms | 2024-02-04 | 7.5 HIGH | N/A |
SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||||
CVE-2007-5579 | 1 Pligg | 1 Pligg Cms | 2024-02-04 | 7.5 HIGH | N/A |
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowledge of a username to reset that user's password by calculating the confirmationcode parameter. |