CVE-2014-9096
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote...
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) n parameter.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) n parameter.
- Record
CVE-2014-9096- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) n parameter.
- Record
CVE-2014-9096- Updated
- 2026-11-02
EUVDEUVD-2014-8922 No score
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) n parameter.
- Record
EUVD-2014-8922- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m82m-mqx4-7c2f No score
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote...
Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) n parameter.
- Record
GHSA-m82m-mqx4-7c2f- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Pligg CMS 2.0.1 - Multiple Vulnerabilities | 2014-07-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-9096 is a high vulnerability (CVSS 7.5) in Pligg Cms, published November 26, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. No source names a fixed version.
References
securityfocus.com/bid/68893
packetstormsecurity.com/files/127615/Pligg-2.0.1-SQL-Injection-Command-Execution.html
github.com/Pligg/pligg-cms/commit/efb967b944375cd3ea3cd84c80d86d339dbe030e
seclists.org/fulldisclosure/2014/Jul/136
nvd.nist.gov/vuln/detail/CVE-2014-9096