WordPress Plugin WP-Forum 2.3 - SQL Injection / Blind SQL Injection

============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 - Severity: 8.5/10 CVSS Base Score...

WP Forum < 2.4 - Multiple SQL Injection

The wp-forum WordPress plugin was affected by a Multiple SQL Injection security vulnerability...

WP-Forum Plugin for WordPress 'forum_feed.php' 'thread' Parameter SQL Injection

The remote host is running WP-Forum, a third-party discussion forum plugin for WordPress. The version of WP-Forum installed on the remote host fails to sanitize input to the 'thread' parameter of the 'forumfeed.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...

Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author:...

WordPress Plugin WP-Forum 1.7.8 - SQL Injection

WordPress Plugin WP-Forum 1.7.8 - SQL Injection ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ---------------------------------------------------------------------------------------------...

Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability ==================================================================...

Wordpress WP-Forum 1.7.8 SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

WordPress Plugin WP-Forum 1.7.8 - SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

CVE-2008-0388

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI...

Sql injection

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI...

CVE-2008-0388

CVE-2008-0388 affects the WordPress WP-Forum Server plugin up to version 1.7.4. The vulnerability is a SQL injection in the user parameter of the showprofile action, allowing remote attackers to execute arbitrary SQL commands. This is caused by improper input handling in the plugin's profile disp...

CVE-2008-0388

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI...

Wordpress plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability

No description provided by source. remote sql injection exploit -::DESCRIPTION== WordPress forum plugin by Fredrik Fahlstad. Version: 1.7.4. exploit: 1+union+select+null,concatuserlogin,0x2f,userpass,0x2f,useremail,null,null,null,null,null+from+wpusers where id=1/ wptbvusers google: Fredrik...

Wordpress plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Wordpress plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability ================================================================== remote sql injection exploit...

WordPress Plugin WP-Forum 1.7.4 - SQL Injection

remote sql injection exploit -::DESCRIPTION== WordPress forum plugin by Fredrik Fahlstad. Version: 1.7.4. exploit: 1+union+select+null,concatuserlogin,0x2f,userpass,0x2f,useremail,null,null,null,null,null+from+wpusers where id=1/ wptbvusers google: Fredrik Fahlstad. Version: 1.7.4. author websec...