Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2009-08-26T14:00:00
Updated: 2018-10-11T19:57:01
Reserved: 2009-08-26T00:00:00
Link: CVE-2008-7091
JSON object: View
NVD Information
Status : Modified
Published: 2009-08-26T14:24:17.077
Modified: 2018-10-11T20:58:17.317
Link: CVE-2008-7091
JSON object: View
Redhat Information
No data.
CWE