Sql injection

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the 1 memberid or 2 groupid parameters in a removemember action or 3 id parameter to...

PT-2012-5927

Name of the Vulnerable Software and Affected Versions Mingle Forum plugin versions prior to 1.0.33 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the memberid or groupid parameters in a "removemember" action, the id parameter to...