NVD

Id
6822  
Name
CVE-2008-7091  
Description
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-26  
Modified Date
2009-08-26  
Seq
2008-7091  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38858 6822 CVE-2008-7091 http://www.gulftech.org/?node=research&article_id=00120-07312008  View
38859 6822 CVE-2008-7091 6173  View
38860 6822 CVE-2008-7091 20080730 Pligg <= 9.9.0 Multiple Vulnerabilities  View
38861 6822 CVE-2008-7091 30458  View
38862 6822 CVE-2008-7091 pligg-multiple-sql-injection(44193)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44675 JVNDB-2009-005682 Pligg における SQL インジェクションの脆弱性 Pligg には、SQL インジェクションの脆弱性が存在します。 CVE-2008-7091 37204 CVE-2008-7091 6822 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005682.html 2009-08-26 2012-12-20 View