CVE

Id
60682  
CVE No.
CVE-2013-0735  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic (1) remove_post, (2) sticky, or (3) closed action or (4) thread parameter in a postreply action to index.php.  
Phase
Assigned (20130102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
611061 60682 CVE-2013-0735 MISC:http://secunia.com/secunia_research/2013-4  View
611062 60682 CVE-2013-0735 BID:58059  View
611063 60682 CVE-2013-0735 URL:http://www.securityfocus.com/bid/58059  View
611064 60682 CVE-2013-0735 OSVDB:90434  View
611065 60682 CVE-2013-0735 URL:http://osvdb.org/90434  View
611066 60682 CVE-2013-0735 SECUNIA:52167  View
611067 60682 CVE-2013-0735 URL:http://secunia.com/advisories/52167  View
611068 60682 CVE-2013-0735 XF:wp-mingleforum-index-sql-injection(82188)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24725 JVNDB-2013-006300 Dell OpenManage Server Administrator におけるオープンリダイレクトの脆弱性 Dell OpenManage Server Administrator (OMSA) には、オープンリダイレクトの脆弱性が存在します。 CVE-2013-0740 60682 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006300.html  View