ThinkSNS V3.0 /apps/public/Lib/Action/AccountAction.class.php SQL注入漏洞

/apps/public/Lib/Action/AccountAction.class.php public function doAuthenticate $verifyInfo = D'userverified'-where'uid='.$this-mid-find; $data'usergroupid' = intval$POST'usergroupid'; if!$data'usergroupid' $data'usergroupid' = 5; …… //$data'info' = t$POST'info'; $data'attachid' = t$POST'attachids...

CVE-2012-6622

Multiple cross-site scripting XSS vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in an editgroup action or 2 usergroupid parameter in an...

CVE-2012-6622: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in an editgroup action or 2 usergroupid parameter in an...