Pligg CMS 1.0.0 release candidate 3
Approved changes feed: RSS · Atom
cpe:2.3:a:pligg:pligg_cms:1.0.0:rc3:*:*:*:*:*:*
part: a version: 1.0.0 update: rc3
| Vendor | Pligg (838b6835-2b42-5c3e-9f9d-45d57b035326) |
|---|---|
| Product | Pligg Cms (e98fa99e-3608-5067-8437-ce5e182830f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/pligg |
purl2cpe | 2026-06-01 10:14:38.901454 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2937 |
vulnerable | 2026-06-08 05:02:07.293868 |
Details available
Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-08-06T19:50:05.203Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2936 |
vulnerable | 2026-06-08 05:02:07.292969 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-08-06T19:50:04.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2436 |
vulnerable | 2026-06-08 05:02:04.523189 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-08-06T19:34:25.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2435 |
vulnerable | 2026-06-08 05:02:04.511728 |
Details available
Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-09-16T16:53:29.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3986 |
vulnerable | 2026-06-08 04:59:28.480830 |
Details available
Cross-site scripting (XSS) vulnerability in Pligg before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-11-03T17:00:00.000Z
Updated: 2024-09-17T04:28:45.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3013 |
vulnerable | 2026-06-08 04:55:12.027120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2577 |
vulnerable | 2026-06-08 04:55:08.787367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4788 |
vulnerable | 2026-06-08 04:51:49.821384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4787 |
vulnerable | 2026-06-08 04:51:49.820891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4786 |
vulnerable | 2026-06-08 04:51:49.815630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.