NVD

Id
8029  
Name
CVE-2011-1047  
Description
Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by wpf.class.php, (2) id parameter in an editpost action to index.php, which is not properly handled by wpf-post.php, or (3) topic parameter to feed.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-02-21  
Modified Date
2011-09-22  
Seq
2011-1047  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45738 8029 CVE-2011-1047 8099  View
45739 8029 CVE-2011-1047 http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin.html  View
45740 8029 CVE-2011-1047 http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_1.html  View
45741 8029 CVE-2011-1047 http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_2.html  View
45742 8029 CVE-2011-1047 20110210 HTB22852: SQL Injection in WP Forum Server wordpress plugin  View
45743 8029 CVE-2011-1047 20110210 HTB22851: SQL Injection in WP Forum Server wordpress plugin  View
45744 8029 CVE-2011-1047 46362  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34065 JVNDB-2011-004307 VastHTML Forum Server プラグインにおける SQL インジェクションの脆弱性 VastHTML Forum Server プラグインには、SQL インジェクションの脆弱性が存在します。 CVE-2011-1047 48954 CVE-2011-1047 8029 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004307.html 2011-02-21 2012-03-27 View