CVE-2012-2937

HIGH 7.5CVE-2012-2937 · Published 27/05/2012 · updated 16/06/2026

In short

CVE-2012-2937 is a HIGH (CVSS 7.5) vulnerability affecting pligg cms (pligg).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pligg cms pligg	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.1.0= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.2.0= 9.5= 9.9= 9.9.0= 9.9.5≤ 1.2.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/admin_index.php, (2) display parameter in a minimize action to admin/admin_index.php, (3) enabled[] parameter to admin/admin_users.php, or (4) msg_id to the module.php in the simple_messaging module.

References

forums.pligg.com/downloads.php
osvdb.org/82048
osvdb.org/82049
osvdb.org/82050
pligg.svn.sourceforge.net/viewvc/pligg
secunia.com/advisories/45431 · Vendor Advisory
secunia.com/secunia_research/2012-19 · Vendor Advisory
securityfocus.com/bid/53625
exchange.xforce.ibmcloud.com/vulnerabilities/75765

More vulnerabilities in pligg cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

pligg cms

pligg

= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.1.0= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.2.0= 9.5= 9.9= 9.9.0= 9.9.5≤ 1.2.1

No fix yet

Description

More vulnerabilities in pligg cms

See all →