Vulnerabilities

TI-2018-13747 CVE-2018-19415 · GHSA-7mjv-m7mv-4v4c

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to…

MEDIUM 45

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to join_group.php or (2) comment_id parameter to story.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2019-01-03 No fix listed CWE-89

TI-2018-13746 CVE-2018-19414 · GHSA-4vrp-83v9-w2x6

Multiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote…

LOW 32

Multiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to groups.php; (2) username parameter to login.php; or (…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02218 Published 2019-01-03 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to…

Multiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote…