Beveiligingsadvies

CVE-2011-1047

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-02-21 18:00:00

Laatst bijgewerkt 2024-08-06 22:14:27

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by wpf.class.php, (2) id parameter in an editpost action to index.php, which is not properly handled by wpf-post.php, or (3) topic parameter to feed.php.

← Alle CVE's bekijken Bekijk op cve.org ↗