CVE Feed

    Dashboard / CVE / CVE-2008-7091

    CVE-2008-7091

    Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.

    Published:Aug 26, 2009
    Last Modified:Apr 23, 2026
    EPS:Aug 26, 2009
    EPSS Score:0.03906
    CVSS Score:7.5

    Affected Products

    Vendor
    Pligg
    Product
    Pligg Cms

    Exploits

    http://www.gulftech.org/?node=research&article_id=00120-07312008http://www.securityfocus.com/bid/30458http://www.gulftech.org/?node=research&article_id=00120-07312008http://www.securityfocus.com/bid/30458https://www.exploit-db.com/exploits/6173https://www.exploit-db.com/exploits/6172

    Related CVEs

    CVE-2024-42611 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_i…
    CVE-2024-42604 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42609 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42610 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42608 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit…
    CVE-2024-42603 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42617 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42605 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_p…
    CVE-2024-42607 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42606 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…

    References

    http://www.gulftech.org/?node=research&article_id=00120-07312008
    http://www.osvdb.org/50189
    http://www.osvdb.org/50190
    http://www.osvdb.org/50191
    http://www.osvdb.org/50192
    http://www.osvdb.org/50193
    http://www.osvdb.org/50194
    http://www.osvdb.org/50195
    http://www.osvdb.org/50196
    http://www.osvdb.org/50197
    http://www.osvdb.org/50198
    http://www.securityfocus.com/archive/1/494987/100/0/threaded
    http://www.securityfocus.com/bid/30458
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44193
    https://www.exploit-db.com/exploits/6173
    http://www.gulftech.org/?node=research&article_id=00120-07312008
    http://www.osvdb.org/50189
    http://www.osvdb.org/50190
    http://www.osvdb.org/50191
    http://www.osvdb.org/50192
    http://www.osvdb.org/50193
    http://www.osvdb.org/50194
    http://www.osvdb.org/50195
    http://www.osvdb.org/50196
    http://www.osvdb.org/50197
    http://www.osvdb.org/50198
    http://www.securityfocus.com/archive/1/494987/100/0/threaded
    http://www.securityfocus.com/bid/30458
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44193
    https://www.exploit-db.com/exploits/6173

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High