HTB22851: SQL Injection in WP Forum Server wordpress plugin

Vulnerability ID: HTB22851 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin1.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection...

HTB22850: SQL Injection in WP Forum Server wordpress plugin

Vulnerability ID: HTB22850 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection...

HTB22852: SQL Injection in WP Forum Server wordpress plugin

Vulnerability ID: HTB22852 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin2.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: Vulnerability Type: SQL Injection Risk level: High...

SQL Injection Vulnerabilities in WP Forum Server

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WP Forum Server WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WP Forum Server 1.1 The vulnerability exists due to input sanitation errors in the...