Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Pligg Subscribe
Filtered by product Pligg
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3573 2 Php-nuke, Pligg 2 Php-nuke, Pligg 2017-08-07 5.0 MEDIUM N/A
The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.