SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-01-16 21:55
Updated : 2024-02-04 18:35
NVD link : CVE-2012-6625
Mitre link : CVE-2012-6625
CVE.ORG link : CVE-2012-6625
JSON object : View
Products Affected
vasthtml
- forumpress
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')