CVE-2011-1047

CVE-2011-1047 concerns multiple SQL injection vulnerabilities in the VastHTML Forum Server (aka ForumPress) WordPress plugin, specifically versions 1.6.1 and 1.6.5. The issues arise from improper input sanitization in three vectors: (1) the search_max parameter in index.php (wpf.class.php), (2) t...