Pligg CMS 1.1.4
Approved changes feed: RSS · Atom
cpe:2.3:a:pligg:pligg_cms:1.1.4:*:*:*:*:*:*:*
part: a version: 1.1.4 update: *
| Vendor | Pligg (838b6835-2b42-5c3e-9f9d-45d57b035326) |
|---|---|
| Product | Pligg Cms (e98fa99e-3608-5067-8437-ce5e182830f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/pligg |
purl2cpe | 2026-06-01 10:14:38.904817 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2937 |
vulnerable | 2026-06-08 05:02:07.294037 |
Details available
Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-08-06T19:50:05.203Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2936 |
vulnerable | 2026-06-08 05:02:07.293148 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-08-06T19:50:04.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2436 |
vulnerable | 2026-06-08 05:02:04.523357 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-08-06T19:34:25.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2435 |
vulnerable | 2026-06-08 05:02:04.517512 |
Details available
Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.
Published: 2012-05-27T20:00:00.000Z
Updated: 2024-09-16T16:53:29.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5023 |
vulnerable | 2026-06-08 04:59:34.190395 |
Details available
Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-2011-3986.
Published: 2011-12-29T11:00:00.000Z
Updated: 2024-08-07T00:23:39.372Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3986 |
vulnerable | 2026-06-08 04:59:28.485761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.