CVE-2012-5327: SQL Injection
First published: Mon Oct 08 2012(Updated: )
Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cartpauj Mingle-forum | <=1.0.32.1 | |
| Cartpauj Mingle-forum | =1.0.00 | |
| Cartpauj Mingle-forum | =1.0.01 | |
| Cartpauj Mingle-forum | =1.0.02 | |
| Cartpauj Mingle-forum | =1.0.03 | |
| Cartpauj Mingle-forum | =1.0.04 | |
| Cartpauj Mingle-forum | =1.0.05 | |
| Cartpauj Mingle-forum | =1.0.06 | |
| Cartpauj Mingle-forum | =1.0.07 | |
| Cartpauj Mingle-forum | =1.0.08 | |
| Cartpauj Mingle-forum | =1.0.09 | |
| Cartpauj Mingle-forum | =1.0.10 | |
| Cartpauj Mingle-forum | =1.0.11 | |
| Cartpauj Mingle-forum | =1.0.12 | |
| Cartpauj Mingle-forum | =1.0.13 | |
| Cartpauj Mingle-forum | =1.0.14 | |
| Cartpauj Mingle-forum | =1.0.15 | |
| Cartpauj Mingle-forum | =1.0.16 | |
| Cartpauj Mingle-forum | =1.0.17 | |
| Cartpauj Mingle-forum | =1.0.18 | |
| Cartpauj Mingle-forum | =1.0.19 | |
| Cartpauj Mingle-forum | =1.0.20 | |
| Cartpauj Mingle-forum | =1.0.21 | |
| Cartpauj Mingle-forum | =1.0.21.1 | |
| Cartpauj Mingle-forum | =1.0.22 | |
| Cartpauj Mingle-forum | =1.0.23 | |
| Cartpauj Mingle-forum | =1.0.23.1 | |
| Cartpauj Mingle-forum | =1.0.23.2 | |
| Cartpauj Mingle-forum | =1.0.24 | |
| Cartpauj Mingle-forum | =1.0.25 | |
| Cartpauj Mingle-forum | =1.0.26 | |
| Cartpauj Mingle-forum | =1.0.27 | |
| Cartpauj Mingle-forum | =1.0.28 | |
| Cartpauj Mingle-forum | =1.0.28.1 | |
| Cartpauj Mingle-forum | =1.0.28.2 | |
| Cartpauj Mingle-forum | =1.0.29 | |
| Cartpauj Mingle-forum | =1.0.30 | |
| Cartpauj Mingle-forum | =1.0.31 | |
| Cartpauj Mingle-forum | =1.0.31.1 | |
| Cartpauj Mingle-forum | =1.0.31.2 | |
| Cartpauj Mingle-forum | =1.0.31.3 | |
| Cartpauj Mingle-forum | =1.0.31.4 | |
| Cartpauj Mingle-forum | =1.0.32 | |
| WordPress WordPress |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.org/files/view/108915/wpmingleforum-sqlxss.txt
- http://plugins.trac.wordpress.org/changeset?reponame=&new=492859@mingle-forum&old=487353@mingle-forum
- http://wordpress.org/extend/plugins/mingle-forum/changelog/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72641
- http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/cartpauj
- canonical/cartpauj mingle-forum
- version/cartpauj mingle-forum/1.0.32.1
- version/cartpauj mingle-forum/1.0.00
- version/cartpauj mingle-forum/1.0.01
- version/cartpauj mingle-forum/1.0.02
- version/cartpauj mingle-forum/1.0.03
- version/cartpauj mingle-forum/1.0.04
- version/cartpauj mingle-forum/1.0.05
- version/cartpauj mingle-forum/1.0.06
- version/cartpauj mingle-forum/1.0.07
- version/cartpauj mingle-forum/1.0.08
- version/cartpauj mingle-forum/1.0.09
- version/cartpauj mingle-forum/1.0.10
- version/cartpauj mingle-forum/1.0.11
- version/cartpauj mingle-forum/1.0.12
- version/cartpauj mingle-forum/1.0.13
- version/cartpauj mingle-forum/1.0.14
- version/cartpauj mingle-forum/1.0.15
- version/cartpauj mingle-forum/1.0.16
- version/cartpauj mingle-forum/1.0.17
- version/cartpauj mingle-forum/1.0.18
- version/cartpauj mingle-forum/1.0.19
- version/cartpauj mingle-forum/1.0.20
- version/cartpauj mingle-forum/1.0.21
- version/cartpauj mingle-forum/1.0.21.1
- version/cartpauj mingle-forum/1.0.22
- version/cartpauj mingle-forum/1.0.23
- version/cartpauj mingle-forum/1.0.23.1
- version/cartpauj mingle-forum/1.0.23.2
- version/cartpauj mingle-forum/1.0.24
- version/cartpauj mingle-forum/1.0.25
- version/cartpauj mingle-forum/1.0.26
- version/cartpauj mingle-forum/1.0.27
- version/cartpauj mingle-forum/1.0.28
- version/cartpauj mingle-forum/1.0.28.1
- version/cartpauj mingle-forum/1.0.28.2
- version/cartpauj mingle-forum/1.0.29
- version/cartpauj mingle-forum/1.0.30
- version/cartpauj mingle-forum/1.0.31
- version/cartpauj mingle-forum/1.0.31.1
- version/cartpauj mingle-forum/1.0.31.2
- version/cartpauj mingle-forum/1.0.31.3
- version/cartpauj mingle-forum/1.0.31.4
- version/cartpauj mingle-forum/1.0.32
- vendor/wordpress
- canonical/wordpress wordpress