📦

pligg

Vendor: pligg

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 2.33% Exploit Prob.
Latest CVE CVE-2020-25287 Sep 13

Security Vulnerability Index

Page 1 / 1
7.2 CVSS
CVE-2020-25287
RCE

Pligg 2.0.3 allows remote authenticated users to execute arbitrary commands because the template editor can edit any file, as demonstrated by an admin/admin_editor.php the_file=..%2Findex.php&open=Open request.

EPSS: 2.71%
5.0 CVSS
CVE-2008-3573
Exploit Found

The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.

EPSS: 1.95%