Wordpress plugin WP-Forum 1.7.8 - Remote SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author:...

CVE-2012-6622

Multiple cross-site scripting XSS vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in an editgroup action or 2 usergroupid parameter in an...

CVE-2012-6623

The CVE-2012-6623 issue affects the WordPress plugin ForumPress WP Forum Server (affected: ForumPress WP Forum Server plugin before 1.7.5). The vulnerability is an XSS in fs-admin/wpf-add-forum.php, exploitable via the groupid parameter in an addforum action to wp-admin/admin.php, allowing remote...

CVE-2012-6622

The CVE-2012-6622 entry concerns the ForumPress WP Forum Server WordPress plugin, specifically the fs-admin/fs-admin.php component, which is vulnerable to multiple XSS flaws. The vulnerability exists in version prior to 1.7.4 and is triggered via the groupid parameter in an editgroup action or th...

HTB22858: SQL Injection in WP Forum wordpress plugin

Vulnerability ID: HTB22858 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011 Vulnerability Type: SQL Injection Ris...

HTB22859: SQL Injection in WP Forum wordpress plugin

Vulnerability ID: HTB22859 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin1.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011 Vulnerability Type: SQL Injection Ri...

HTB22860: SQL Injection in WP Forum wordpress plugin

Vulnerability ID: HTB22860 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin2.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011 Vulnerability Type: SQL Injection Ri...

WP Forum Server 1.6.5 Wordpress Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Product: WP Forum Server wordpress plugin Vendor: VastHTML Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing...

HTB22850: SQL Injection in WP Forum Server wordpress plugin

Vulnerability ID: HTB22850 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection...

HTB22851: SQL Injection in WP Forum Server wordpress plugin

Vulnerability ID: HTB22851 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin1.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection...

SQL Injection Vulnerabilities in WP Forum wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WP Forum wordpress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WP Forum wordpress plugin 1.1 The vulnerability exists due to input sanitation error in the...

HTB22852: SQL Injection in WP Forum Server wordpress plugin

Vulnerability ID: HTB22852 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpressplugin2.html Product: WP Forum Server wordpress plugin Vendor: VastHTML http://lucidcrew.com/ Vulnerable Version: 1.6.5 Vendor Notification: Vulnerability Type: SQL Injection Risk level: High...

SQL Injection Vulnerabilities in WP Forum Server

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in WP Forum Server WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerabilities in WP Forum Server 1.1 The vulnerability exists due to input sanitation errors in the...

WordPress WP-Forum插件多个SQL注入漏洞

BUGTRAQ ID: 37357 CVE ID: CVE-2009-3703 WP-Forum是一款基于PHP的WordPress插件。 WP-Forum的wpf.class.php页面没有正确地过滤用户所提交的forum、topic和searchmax参数，以及在 editpost或viewtopic操作中所提交的id参数，远程攻击者可以通过提交恶意参数请求执行SQL注入攻击。以下是有漏洞的代码段： wpf.class文件 1836 $optionmaxdays = $POST'searchmax'; // - this line is not being sanitized 183...

Sql injection

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

CVE-2009-3703

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

CVE-2009-3703

CVE-2009-3703 concerns the WordPress WP-Forum plugin (

CVE-2009-3703

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

[ISecAuditors Security Advisories] WP-Forum <= 2.3 SQL Injection vulnerabilities

============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 - Severity: 8.5/10 CVSS Base Score...

WordPress Plugin WP-Forum 2.3 - SQL Injection Blind SQL Injection

WordPress Plugin WP-Forum 2.3 - SQL Injection Blind SQL Injection ============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 -...