Approved changes feed: RSS · Atom

cpe:2.3:a:pligg:pligg:9.9.5:*:*:*:*:*:*:*

part: a version: 9.9.5 update: *

VendorPligg (838b6835-2b42-5c3e-9f9d-45d57b035326)
ProductPligg (953de043-3114-5b2e-9c68-220eafd2bbda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/logbie/pligg purl2cpe 2026-06-01 10:14:38.899402
pkg:sourceforge/pligg purl2cpe 2026-06-01 10:14:38.899405

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3573 vulnerable 2026-06-08 04:50:35.383046 Details available
The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.
Published: 2008-08-10T20:00:00.000Z
Updated: 2024-08-07T09:45:18.925Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.