CVE-2012-2937

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move…

published May 27, 2012

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02422 · 84.0th percentile
Published
2012-05-27T20:00Z
EPSS history
Timeline
  • 27 MAY 20:00Z
    Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move…
    cvelistv5