CVE Feed

    Dashboard / CVE / CVE-2024-31673

    CVE-2024-31673

    Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.

    Published:May 3, 2024
    Last Modified:Jun 17, 2025
    EPS:May 3, 2024
    EPSS Score:0.00301
    CVSS Score:9.8

    Affected Products

    Vendor
    Kliqqi
    Product
    Kliqqi Cms

    Exploits

    https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/265https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/265

    Related CVEs

    CVE-2024-48700 (CVSS 7.2) — Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backd…
    CVE-2024-42617 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42611 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_i…
    CVE-2024-42619 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain…
    CVE-2020-21119 (CVSS 9.8) — SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue para…
    CVE-2020-21121 (CVSS 9.8) — Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admi…
    CVE-2016-10756 (CVSS 8.8) — Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used t…
    CVE-2018-11405 (CVSS 8.8) — Kliqqi 2.0.2 has CSRF in admin/admin_users.php.…
    CVE-2017-17889 (CVSS 5.4) — Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile,…
    CVE-2017-17902 (CVSS 9.8) — SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High