CVE Feed

    Dashboard / CVE / CVE-2020-21119

    CVE-2020-21119

    SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code.

    Published:Feb 15, 2023
    Last Modified:Mar 20, 2025
    EPS:Feb 15, 2023
    EPSS Score:0.00251
    CVSS Score:9.8

    Affected Products

    Vendor
    Kliqqi
    Product
    Kliqqi Cms

    Exploits

    https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259

    Related CVEs

    CVE-2024-48700 (CVSS 7.2) — Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backd…
    CVE-2024-42617 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42611 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_i…
    CVE-2024-42619 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain…
    CVE-2024-31673 (CVSS 9.8) — Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.…
    CVE-2020-21121 (CVSS 9.8) — Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admi…
    CVE-2016-10756 (CVSS 8.8) — Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used t…
    CVE-2018-11405 (CVSS 8.8) — Kliqqi 2.0.2 has CSRF in admin/admin_users.php.…
    CVE-2017-17889 (CVSS 5.4) — Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile,…
    CVE-2017-17902 (CVSS 9.8) — SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High