Description
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
References (6)
Core 6
Core References
Product x_refsource_confirm
http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?r1=1532&r2=2143&pathrev=2143
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/67069
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/42408
Product x_refsource_confirm
http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?view=log&pathrev=2143
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/40931
Vendor Advisory x_refsource_confirm
http://www.pligg.com/blog/991/pligg-cms-1-1-1-release/
Scores
EPSS
0.0126
EPSS Percentile
66.5%
Details
CWE
CWE-89
Status
published
Products (6)
pligg/pligg_cms
1.0.0 (6 CPE variants)
pligg/pligg_cms
1.0.1
pligg/pligg_cms
1.0.2
pligg/pligg_cms
1.0.3
pligg/pligg_cms
1.0.4
pligg/pligg_cms
< 1.1.0
Published
Aug 16, 2010
Tracked Since
Feb 18, 2026