Directory traversal vulnerability in the captcha module in Pligg CMS before 1.2.2 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the captcha parameter to module.php, as demonstrated by cross-site request forgery (CSRF) attacks.

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) list parameter in a move action to admin/adminindex.php, (2) display parameter in a minimize action to admin/adminindex.php, (3) enabled[] parameter to admin/adminusers.php, or (4) msgid to the module.php in the simplemessaging module.

Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) page parameter to (a) admin/admincomments.php or (b) admin/adminlinks.php; or list parameter in a (3) move or (4) minimize action to (c) admin/adminindex.php.