CVE-2012-6625

Published Jan 16, 2014

Last updated 8 years ago

Overview

Description: SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:*:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7DE1FCA6-0FFB-4E21-89EB-67DEB207A160",
            "versionEndIncluding": "1.7.4"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.0:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ED0011BC-EC52-4A41-A100-163B27446558"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.1:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "091F53B6-D32E-4DEE-8D02-F775868648E8"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.2:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CD493B30-DCB9-4FAC-9441-CACD70F59353"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.3:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B697EF72-29AD-4059-BF71-F49EA23CB8ED"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.4:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "25E04C3F-C0E8-4BAF-9DAE-1D3119CB58F8"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.5:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B3C27AA1-5DAC-4496-A05A-D5E18A623D02"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.5.1:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B9A27934-D2F3-45FD-B9F1-AB2EF356EEDB"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.5.2:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD94030B-FD8B-412F-8896-E2C8AF4F2122"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41000CAF-A103-4BC8-94ED-22741F161F12"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.2:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "31697454-8FE4-4555-BABE-F1C4A0C01EA2"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.3:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5C75483E-FD07-412C-9722-8135658A9AAC"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.4:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9EE9DEF1-430E-4CD4-9DF4-CAFE97D425E3"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.5:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F06D316-C303-4673-BA8C-16DC19ED7BB1"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.6:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1865B793-170B-49D7-A788-0758391C2C4E"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.7:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2970E25D-32AB-4DED-B573-AE296E3ABFC6"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.8:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3AA6E04D-50FB-45D0-BD28-154307BE3444"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.9:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3EE637AB-E282-494A-AC56-0893FF296A71"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "475293DD-1D29-460A-8891-20C6DAC69F5E"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7.1:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93292F02-BCC9-4C19-961E-03A3056DC6AC"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7.2:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4196969E-0797-4DD4-B790-877ABD3BA708"
          },
          {
            "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7.3:-:-:*:-:wordpress:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D6E6667-8609-407D-A40A-7C5423B60243"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References