CVE-2010-3013

N/A Unknown

Published: August 16, 2010 Modified: April 29, 2026

Description

SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?r1=1532&r2=2143&pathrev=2143

Source: cve@mitre.org

http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?view=log&pathrev=2143

Source: cve@mitre.org

http://secunia.com/advisories/40931

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/67069

Source: cve@mitre.org

http://www.pligg.com/blog/991/pligg-cms-1-1-1-release/

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/42408

Source: cve@mitre.org

http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?r1=1532&r2=2143&pathrev=2143