CVE-2012-5328

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the 1 memberid or 2 groupid parameters in a removemember action or 3 id parameter to...

CVE-2012-5328

Mingle Forum plugin for WordPress (v1.0.32.1 and earlier than 1.0.33) contains multiple SQL injection vulnerabilities that allow remote authenticated users to execute arbitrary SQL commands via specific parameters: memberid or groupid in removemember, id in fs-admin/fs-admin.php, or edit_forum_id...