Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 searchwords parameter in a search action to wpf.class.php or 2 togroupusers parameter in an addusertogroup action to...

CVE-2013-0736

Multiple cross-site request forgery CSRF vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 modify user privileges or 2 conduct cross-site scripting XSS attacks via...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 modify user privileges or 2 conduct cross-site scripting XSS attacks via...

CVE-2013-0736

Multiple cross-site request forgery CSRF vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 modify user privileges or 2 conduct cross-site scripting XSS attacks via...

MyBB KingChat Plugin - Persistent Cross-Site Scripting

MyBB KingChat Plugin - Persistent Cross-Site Scripting Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork...

CVE-2012-5327

Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 deleteusrgrp parameter in a deleteusergroups action, 2 usergroup paramete...

Sql injection

Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 deleteusrgrp parameter in a deleteusergroups action, 2 usergroup paramete...

CVE-2012-5327

Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 deleteusrgrp parameter in a deleteusergroups action, 2 usergroup paramete...

CVE-2012-5328

Mingle Forum plugin for WordPress (v1.0.32.1 and earlier than 1.0.33) contains multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands via specific parameters: memberid or groupid in removemember, id in fs-admin/fs-admin.php, or edit_forum_id...

CVE-2012-5327

The Mingle Forum WordPress plugin (versions before 1.0.33; affected 1.0.32.1) is impacted by multiple SQL injection flaws in fs-admin/fs-admin.php. An authenticated user can trigger SQL commands via: (1) delete_usrgrp[] in delete_usergroups, (2) usergroup in add_user_togroup, or (3) add_forum_gro...

WordPress Mingle Forum Plugin 'search' Parameter XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

HTB22859: SQL Injection in WP Forum wordpress plugin

Vulnerability ID: HTB22859 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin1.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011 Vulnerability Type: SQL Injection Ri...

HTB22849: Path disclosure in Mingle Forum wordpress plugin

Vulnerability ID: HTB22849 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmingleforumwordpressplugin.html Product: Mingle Forum wordpress plugin Vendor: Cartpauj http://cartpauj.com/ Vulnerable Version: 1.0.28 Vendor Notification: 15 February 2011 Vulnerability Type: Path disclosure...

WordPress Plugin Simple:Press 4.3.0 - SQL Injection

WordPress Plugin Simple:Press 4.3.0 - SQL Injection Title: Simple:Press Wordpress Plugin SQL Injection Vulnerability Author: ADEO Security Published: 03/07/2010 Version: v4.3.0 Possible all versions Vendor: http://simple-press.com Download: http://simple-press.com/download-manager.php?id=228...

Sql injection

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

CVE-2009-3703

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

WordPress Plugin WP-Forum 2.3 - SQL Injection / Blind SQL Injection

============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 - Severity: 8.5/10 CVSS Base Score...

Wordpress WP-Forum 1.7.8 SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

Geeklog Forum Plugin vulnerable to cross-site scripting

Overview Geeklog Forum Plugin contains a cross-site scripting vulnerability. Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. NetAgent Co., Ltd. reported this vulnerability to IPA. JPCERT/C...

CVE-2008-3316

Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...