Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3035▼ 39 respecto a la semana anterior
Críticas / altas1415▲ 62 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.2) | 0.60% | — | Kliqqi CMS | 25/10/2024 | 17/6/2026 | Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component. | |
| Analizada | Crítica (9.8) | 0.57% | — | Kliqqi CMS | 3/5/2024 | 17/6/2026 | Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter. | |
| Modificada | Crítica (9.8) | 0.89% | — | Kliqqi CMS | 15/2/2023 | 17/6/2026 | SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to gain escalated privileges and execute arbitrary code. | |
| Modificada | Crítica (9.8) | 1.1% | — | Kliqqi CMS | 15/9/2021 | 17/6/2026 | Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file. | |
| Modificada | Alta (8.8) | 0.67% | — | Kliqqi CMS | 24/5/2019 | 17/6/2026 | Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used to configure the uploading of .php files, and then modules/upload/upload_main.php can be used for the upload itself. | |
| Modificada | Alta (8.8) | 0.58% | — | Kliqqi CMS | 24/5/2018 | 17/6/2026 | Kliqqi 2.0.2 has CSRF in admin/admin_users.php. | |
| Modificada | Crítica (9.8) | 1.0% | — | Kliqqi CMS | 22/4/2018 | 17/6/2026 | SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI. | |
| Modificada | Media (5.4) | 0.51% | — | Kliqqi CMS | 22/4/2018 | 17/6/2026 | Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php. |