From 99181a3bd98048e8c6d310b8336854ff14e3f0df Mon Sep 17 00:00:00 2001
From: Peter van der Laan <vanderlaan.pm@gmail.com>
Date: Tue, 5 Nov 2013 09:52:33 +0100
Subject: [PATCH] Added OSVDB #90432, #90433, #90434

---
 data/plugin_vulns.xml | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 0a5db73b..d6278bc5 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -3020,11 +3020,34 @@
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
-      <title>Mingle Forum 1.0.33.3 - Multiple Parameter SQL Injection</title>
+      <title>Mingle Forum 1.0.33.3 - fs-admin.php togroupusers Parameter XSS</title>
+      <references>
+        <osvdb>90432</osvdb>
+        <cve>2013-0734</cve>
+        <secunia>52167</secunia>
+      </references>
+      <type>XSS</type>
+      <fixed_in>1.0.34</fixed_in>
+    </vulnerability>
+    <vulnerability>
+      <title>Mingle Forum 1.0.33.3 - wpf.class.php search_words Parameter XSS</title>
+      <references>
+        <osvdb>90433</osvdb>
+        <cve>2013-0734</cve>
+        <secunia>52167</secunia>
+      </references>
+      <type>XSS</type>
+      <fixed_in>1.0.34</fixed_in>
+    </vulnerability>
+    <vulnerability>
+      <title>Mingle Forum 1.0.33.3 - wpf.class.php Multiple Parameter SQL Injection</title>
       <references>
         <osvdb>90434</osvdb>
+        <cve>2013-0735</cve>
+        <secunia>52167</secunia>
       </references>
       <type>SQLI</type>
+      <fixed_in>1.0.34</fixed_in>
     </vulnerability>
     <vulnerability>
       <title>Mingle Forum 1.0.35 - Privilege Escalation CSRF</title>