CVE-2010-2577

HIGH 7.5CVE-2010-2577 · Published 16/08/2010 · updated 16/06/2026

In short

CVE-2010-2577 is a HIGH (CVSS 7.5) vulnerability affecting pligg cms (pligg).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pligg cms pligg	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4≤ 1.1.0`	No fix yet

Description

Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to (1) storyrss.php or (2) story.php.

References

secunia.com/advisories/40931 · Vendor Advisory
secunia.com/secunia_research/2010-111 · Vendor Advisory
osvdb.org/67067
osvdb.org/67068
pligg.com/blog/991/pligg-cms-1-1-1-release · Vendor Advisory
securityfocus.com/bid/42408

More vulnerabilities in pligg cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free