CVE-2010-3013
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to...
CVE-2010-3013 is a high vulnerability (CVSS 7.5) in Pligg Cms, published August 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 70th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.26%EPSS, 70th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
Exploit likelihood
Affected products
What each source reports
NVD Score used
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
- Record
CVE-2010-3013- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
- Record
CVE-2010-3013- Updated
- 2026-11-02
EUVDEUVD-2010-3015No score
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
- Record
EUVD-2010-3015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qqh2-6g7g-4372No score
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to...
SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577.
- Record
GHSA-qqh2-6g7g-4372- Weakness
- CWE-89
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
pligg.svn.sourceforge.net/viewvc/pligg/trunk/groupadmin.php?r1=1532&r2=2143&pathrev=2143
osvdb.org/67069
securityfocus.com/bid/42408
secunia.com/advisories/40931
pligg.com/blog/991/pligg-cms-1-1-1-release
nvd.nist.gov/vuln/detail/CVE-2010-3013
github.com/advisories/GHSA-qqh2-6g7g-4372