CVE-2011-1047
Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) search_max parameter in a search action to index.php, which is not properly handled by wpf.class.php, (2) id parameter in an editpost action to index.php, which is not properly handled by wpf-post.php, or (3) topic parameter to feed.php.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 5.02% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- vasthtml/forum server
- Source
- cve@mitre.org
References
- http://osvdb.org/70993
- http://osvdb.org/70994
- http://secunia.com/advisories/43306Vendor Advisory
- http://securityreason.com/securityalert/8099Exploit
- http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin.html
- http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_1.html
- http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_2.html
- http://www.securityfocus.com/archive/1/516400/100/0/threaded
- http://www.securityfocus.com/archive/1/516402/100/0/threaded
- http://www.securityfocus.com/bid/46362Exploit
- http://osvdb.org/70993
- http://osvdb.org/70994
- http://secunia.com/advisories/43306Vendor Advisory
- http://securityreason.com/securityalert/8099Exploit
- http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin.html
- http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_1.html
- http://www.htbridge.ch/advisory/sql_injection_in_wp_forum_server_wordpress_plugin_2.html
- http://www.securityfocus.com/archive/1/516400/100/0/threaded
- http://www.securityfocus.com/archive/1/516402/100/0/threaded
- http://www.securityfocus.com/bid/46362Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.