Kliqqi

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Kliqqi records in CISA KEV

No Kliqqi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kliqqi Cms 8 records HIGH

Records

8 records

TI-2020-13991 CVE-2020-21119 · GHSA-x4w3-fmjc-w729

SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php…

HIGH 82

SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00885 Published 2023-02-15 No fix listed CWE-89

TI-2024-20909 CVE-2024-31673 · GHSA-v8g5-mgjx-398c

Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.

MEDIUM 50

Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2024-05-03 No fix listed CWE-89

TI-2020-13993 CVE-2020-21121 · GHSA-c43r-86m8-rvrg

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue…

MEDIUM 44

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01116 Published 2021-09-15 No fix listed CWE-89

TI-2017-13131 CVE-2017-17902 · GHSA-3r4w-vr4q-99hh

SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.

MEDIUM 44

SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01035 Published 2018-04-22 No fix listed CWE-89

TI-2018-08134 CVE-2018-11405 · GHSA-8348-hh7h-q6wc

Kliqqi 2.0.2 has CSRF in admin/admin_users.php.

LOW 39

Kliqqi 2.0.2 has CSRF in admin/admin_users.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00566 Published 2018-05-24 No fix listed CWE-352

TI-2016-08794 CVE-2016-10756 · GHSA-xp2m-mr92-wfjx

Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because…

LOW 39

Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload it…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00669 Published 2019-05-24 No fix listed CWE-352

TI-2024-32465 CVE-2024-48700 · GHSA-rrm4-5qp7-hx75

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can…

LOW 35

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00595 Published 2024-10-25 No fix listed CWE-94

TI-2017-13119 CVE-2017-17889 · GHSA-7m85-wjf6-63pg

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage…

LOW 25

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-04-22 No fix listed CWE-79

Open these records in search →

Critical	4
High	3
Medium	1
Low	0
No CVSS	0