Pligg CMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	45580
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 27 2010 12:00AM
Updated:	Dec 27 2010 12:00AM
Credit:	Michael Brooks
Vulnerable:	Pligg Pligg CMS 1.1.2
Not Vulnerable:

Pligg CMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities

Pligg CMS is prone to an SQL-injection vulnerability and multiple cross-site-scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Pligg CMS 1.1.2 is vulnerable; other versions may also be affected.

Pligg CMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/pligg_1.1.2/search.php?adv=1&status='and+sleep(9)or+sleep(9)or+1%3D' &search=on&advancesearch= Search+&sgroup=on&stags=0&slink=on&scategory=on&scomments=0&suser=0

http://www.example.com/pligg_1.1.2/?xss='onmouseover=alert(1);//
http://www.example.com/pligg_1.1.2/?search=" onclick=alert(1) a=

Pligg CMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Pligg CMS SQL Injection and Multiple Cross Site Scripting Vulnerabilities

References:

• Vendor Homepage (Pligg)