CVE Feed

    Dashboard / CVE / CVE-2020-21121

    CVE-2020-21121

    Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file.

    Published:Sep 15, 2021
    Last Modified:Nov 21, 2024
    EPS:Sep 15, 2021
    EPSS Score:0.00304
    CVSS Score:9.8

    Affected Products

    Vendor
    Kliqqi
    Product
    Kliqqi Cms

    Exploits

    https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/259

    Related CVEs

    CVE-2024-48700 (CVSS 7.2) — Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backd…
    CVE-2024-42617 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42611 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_i…
    CVE-2024-42619 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain…
    CVE-2024-31673 (CVSS 9.8) — Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.…
    CVE-2020-21119 (CVSS 9.8) — SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue para…
    CVE-2016-10756 (CVSS 8.8) — Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used t…
    CVE-2018-11405 (CVSS 8.8) — Kliqqi 2.0.2 has CSRF in admin/admin_users.php.…
    CVE-2017-17889 (CVSS 5.4) — Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile,…
    CVE-2017-17902 (CVSS 9.8) — SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High