Multiple Vulnerabilities in Mingle Forum wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Mingle Forum wordpress plugin which could be exploited to perform script insertion attacks and disclose potentially sensitive information. 1 Script insertion vulnerability in Mingle Forum wordpress plugin Input passed to...

Mingle Forum Plugin for WordPress 'topic' parameter SQL Injection

The version of the Mingle Forum plugin for WordPress installed on the remote host is affected by a SQL injection vulnerability. The plugin fails to properly sanitize user-supplied input to the 'topic' parameter of the 'feed.php' script. An unauthenticated, remote attacker can leverage this issue ...

Mingle Forum (WordPress Plugin) <= 1.0.26 Multiple Vulnerabilities

Exploit for php platform in category web applications -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted:...

Mingle Forum SQL Injection / Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted: Paul Carter - Maintainer of plugin. 2. Summary Mingle...

WordPress Mingle Forum Plugin <= 1.0.26 - Multiple Vulnerabilities

There exist multiple vulnerabilities in Mingle Forum plugin for WordPress: 1. There is a SQL injection that reads application data. It is in the RSS feed generator. An attacker can retrieve information from the MySql database by crafting specific URLs. 2. SQL injection is in the edit post...

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors...

WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. Advisory Information Title: Multiple Vulnerabilities in Mingle Forum WordPress Plugin Advisory URL: http://www.charleshooper.net/advisories/ Date Published: January 8th, 2011 Vendors Contacted: Paul Carter - Maintainer of plugin. 2. Summary Mingle...