10 matches found
CVE-2012-6622
Multiple cross-site scripting XSS vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in an editgroup action or 2 usergroupid parameter in an...
CVE-2012-6622
Multiple cross-site scripting XSS vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in an editgroup action or 2 usergroupid parameter in an...
CVE-2012-6623
Cross-site scripting XSS vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an addforum action to wp-admin/admin.php...
CVE-2012-6625
SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action...
CVE-2012-6622: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in an editgroup action or 2 usergroupid parameter in an...
CVE-2012-6623: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an addforum action to wp-admin/admin.php...
PT-2014-2391
Name of the Vulnerable Software and Affected Versions ForumPress WP Forum Server plugin versions prior to 1.7.4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the groupid parameter in an "editgroup" action or the usergroup id paramet...
PT-2014-2394
Name of the Vulnerable Software and Affected Versions ForumPress WP Forum Server plugin versions prior to 1.7.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the groupid parameter in an "editgroup" action. Recommendations For versions prior ...
PT-2014-2392
Name of the Vulnerable Software and Affected Versions ForumPress WP Forum Server plugin versions prior to 1.7.5 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an 'addforum...
CVE-2012-6625: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action...