Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Mingle Forum插件多个SQL注入漏洞
Vulnerability Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress中的Mingle Forum插件1.0.33之前的1.0.32.1版本中的fs-admin/fs-admin.php中存在多个SQL注入漏洞。远程验证的攻击者可利用这些漏洞通过(1)delete_usergroups操作中的delete_usrgrp[]参数(2)add_user_togroup操作中的usergroup参数或 (3)add_fo
CVSS Information
N/A
Vulnerability Type
N/A