Mingle-Forum CVE-2012-5327 SQL-Injection Vulnerability
BID:73572
Info
Mingle-Forum CVE-2012-5327 SQL-Injection Vulnerability
| Bugtraq ID: | 73572 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-5327 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2012 12:00AM |
| Updated: | Oct 08 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Cartpauj Mingle-Forum 1.0.28 Cartpauj Mingle-Forum 1.0.27 Cartpauj Mingle-Forum 1.0.26 Cartpauj Mingle-Forum 1.0.23 Cartpauj Mingle-Forum 1.0.21 Cartpauj Mingle-Forum 1.0.20 Cartpauj Mingle-Forum 1.0.10 Cartpauj Mingle-Forum 1.0.9 Cartpauj Mingle-Forum 1.0.1 Cartpauj Mingle-Forum 1.0 Cartpauj Mingle-Forum 1.0.32.1 Cartpauj Mingle-Forum 1.0.32 Cartpauj Mingle-Forum 1.0.31.4 Cartpauj Mingle-Forum 1.0.31.3 Cartpauj Mingle-Forum 1.0.31.2 Cartpauj Mingle-Forum 1.0.31.1 Cartpauj Mingle-Forum 1.0.31 Cartpauj Mingle-Forum 1.0.30 Cartpauj Mingle-Forum 1.0.29 Cartpauj Mingle-Forum 1.0.28.2 Cartpauj Mingle-Forum 1.0.28.1 Cartpauj Mingle-Forum 1.0.25 Cartpauj Mingle-Forum 1.0.24 Cartpauj Mingle-Forum 1.0.23.2 Cartpauj Mingle-Forum 1.0.23.1 Cartpauj Mingle-Forum 1.0.22 Cartpauj Mingle-Forum 1.0.21.1 Cartpauj Mingle-Forum 1.0.19 Cartpauj Mingle-Forum 1.0.18 Cartpauj Mingle-Forum 1.0.17 Cartpauj Mingle-Forum 1.0.16 Cartpauj Mingle-Forum 1.0.15 Cartpauj Mingle-Forum 1.0.14 Cartpauj Mingle-Forum 1.0.13 Cartpauj Mingle-Forum 1.0.12 Cartpauj Mingle-Forum 1.0.10 Cartpauj Mingle-Forum 1.0.08 Cartpauj Mingle-Forum 1.0.07 Cartpauj Mingle-Forum 1.0.06 Cartpauj Mingle-Forum 1.0.05 Cartpauj Mingle-Forum 1.0.04 Cartpauj Mingle-Forum 1.0.03 Cartpauj Mingle-Forum 1.0.02 |
| Not Vulnerable: | |
Discussion
Mingle-Forum CVE-2012-5327 SQL-Injection Vulnerability
Mingle-Forum is prone to a sql-injection vulnerability. Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action.
Mingle-Forum is prone to a sql-injection vulnerability. Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action.
References
Mingle-Forum CVE-2012-5327 SQL-Injection Vulnerability
References:
References: