diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 241024b8..11319fd8 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -3834,11 +3834,36 @@ - WP Forum Server 1.6.5 - SQL Injection Vulnerability + WP Forum Server <= 1.7.3 - wpf-insert.php edit_post_id Parameter SQL Injection - 16235 + 75463 + 2012-6625 + 45974 + http://packetstormsecurity.com/files/112703/ SQLI + 1.7.4 + + + WP Forum Server <= 1.7.3 - fs-admin/wpf-add-forum.php groupid Parameter XSS + + 102185 + 49167 + http://packetstormsecurity.com/files/112703/ + http://www.securityfocus.com/bid/65215 + 2012-6622 + + XSS + + + WP Forum Server <= 1.7.3 - fs-admin/fs-admin.php Multiple Parameter XSS + + 81914 + 49155 + http://packetstormsecurity.com/files/112703/ + 2012-6622 + + XSS WP Forum Server <= 1.7 - SQL Injection Vulnerability @@ -3848,13 +3873,27 @@ SQLI - WP Forum Server <= 1.7.3 - SQL Injection / XSS Vulnerabilities + WP Forum Server 1.6.5 - feed.php topic Parameter SQL Injection - http://packetstormsecurity.com/files/112703/ - 2012-6622 - 2012-6625 + 70994 + 2011-1047 + 43306 + 16235 + http://www.securityfocus.com/bid/46360 + http://www.securityfocus.com/bid/46362 - MULTI + SQLI + + + WP Forum Server 1.6.5 - index.php Multiple Parameter SQL Injection + + 70993 + 2011-1047 + 43306 + 16235 + http://www.securityfocus.com/bid/46362 + + SQLI