CVE-2012-2936 Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_co...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admin_comments.php or (b) admin/admin_links.php; or list parameter in a (3) move or (4) minimize action to (c) admin/admin_index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pligg cms | All versions | No fix listed |
| pligg cms | <= 1.2.1 | No fix listed |
| pligg cms | = 1.0.0 | No fix listed |
| pligg cms | = 1.0.0-rc1 | No fix listed |
| pligg cms | = 1.0.0-rc2 | No fix listed |
| pligg cms | = 1.0.0-rc3 | No fix listed |
| pligg cms | = 1.0.0-rc4 | No fix listed |
| pligg cms | = 1.0.0-rc5 | No fix listed |
| pligg cms | = 1.0.1 | No fix listed |
| pligg cms | = 1.0.2 | No fix listed |
| pligg cms | = 1.0.3 | No fix listed |
| pligg cms | = 1.0.4 | No fix listed |
| pligg cms | = 1.1.0 | No fix listed |
| pligg cms | = 1.1.2 | No fix listed |
| pligg cms | = 1.1.3 | No fix listed |
| pligg cms | = 1.1.4 | No fix listed |
| pligg cms | = 1.1.5 | No fix listed |
| pligg cms | = 1.2.0 | No fix listed |
| pligg cms | = 9.5 | No fix listed |
| pligg cms | = 9.9 | No fix listed |
| pligg cms | = 9.9.0 | No fix listed |
| pligg cms | = 9.9.0-beta | No fix listed |
| pligg cms | = 9.9.5 | No fix listed |
| pligg cms | = 9.9.5-beta | No fix listed |
References
- forums.pligg.com
- 82044 vdb-entry
- 82045 vdb-entry
- pligg.svn.sourceforge.net
- 45431 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 53625 vdb-entry
- pliggcms-multiple1-xss(75764) vdb-entry