Browse CVEs

HIGH 7.2 CVE-2024-48700 Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php … Kliqqi Cms after 3.5.2 Fix from $1,9502024-10-25 CRITICAL 9.8 CVE-2024-31673 Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter. Kliqqi Cms No fix yet Fix from $2,3002024-05-03 CRITICAL 9.8 CVE-2020-21119 SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalat… Kliqqi Cms No fix yet Fix from $2,3002023-02-15 CRITICAL 9.8 CVE-2020-21121 Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file. Kliqqi Cms No fix yet Fix from $2,3002021-09-15 HIGH 8.8 CVE-2016-10756 Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files… Kliqqi Cms No fix yet Fix from $1,9502019-05-24 HIGH 8.8 CVE-2018-11405 Kliqqi 2.0.2 has CSRF in admin/admin_users.php. Kliqqi Cms No fix yet Fix from $1,9502018-05-24 CRITICAL 9.8 CVE-2017-17902 SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI. Kliqqi Cms Mitigation only Fix from $2,3002018-04-22 MEDIUM 5.4 CVE-2017-17889 Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Descrip… Kliqqi Cms No fix yet Fix from $1,6002018-04-22