CVE-2012-5328
Estado: ModificadaMedia (6.5)—
Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the (1) memberid or (2) groupid parameters in a removemember action or (3) id parameter to fs-admin/fs-admin.php, or (4) edit_forum_id parameter in an edit_save_forum action to fs-admin/wpf-edit-forum-group.php.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.51%
- Percentil entre todas las CVEs puntuadas: 74
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-89
Referencias
- http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum
- http://wordpress.org/extend/plugins/mingle-forum/changelog/
- http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum
- http://wordpress.org/extend/plugins/mingle-forum/changelog/
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-5328",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-10-08T20:55:01.823",
"references": [
{
"url": "http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum",
"source": "cve@mitre.org"
},
{
"url": "http://wordpress.org/extend/plugins/mingle-forum/changelog/",
"source": "cve@mitre.org"
},
{
"url": "http://plugins.trac.wordpress.org/changeset?reponame=&new=492859%40mingle-forum&old=487353%40mingle-forum",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://wordpress.org/extend/plugins/mingle-forum/changelog/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the (1) memberid or (2) groupid parameters in a removemember action or (3) id parameter to fs-admin/fs-admin.php, or (4) edit_forum_id parameter in an edit_save_forum action to fs-admin/wpf-edit-forum-group.php."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de inyección SQL en el complemento Mingle Forum v1.0.32.1 y otras versiones antes de v1.0.33 para WordPress podría permitir a usuarios remotos autenticados ejecutar comandos SQL a través de los parámetros (1) memberid o (2) groupid en una acción removemember o el parámetro (3) id a fs-admin/fs-admin.php, o el parámetro (4) edit_forum_id parameter en una acción edit_save_forum a fs-admin/wpf-edit-forum-group.php."
}
],
"lastModified": "2026-06-16T23:46:39.900",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86442062-55D6-44A0-8ADC-415116F0519D",
"versionEndIncluding": "1.0.32.1"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.00:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0575F80A-8CF3-4E21-8A00-8CF98B0A2ECA"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "840FCA04-3334-4D4A-9F89-42DAEB6D6163"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FDBBB4B-1ED6-4F90-8FF6-2B4137FF7729"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CB7EBEF-CEED-4947-B751-B675733ABD89"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF012118-3D0B-44DA-93D2-8D3C3C39CF11"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.05:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B708A6F8-F41A-4DC9-B943-720A57C614F9"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0978EC7-8F0E-47C1-88F9-3D695F4B9B87"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F23F22C-FAC4-4933-AC93-B526B6E2CA03"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "292551C2-6279-47F4-A878-3E83E71FFD1C"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95F56C25-68B4-46E9-8D91-9832759C6026"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BF3FA6A-5C03-4817-87FC-12603DF05332"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB033E81-9346-4160-B83B-E67D264DBEB9"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99C8F213-BED5-438A-BDB4-3DA5F4B4D158"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24EC039D-E4BD-4F85-82E2-E74F50C1E4C5"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFF7E37B-61C4-4354-9A7C-92C47F25A608"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D75DACF-1E07-4940-B4CD-D80845FE351C"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ED47732-4DBD-4374-8C47-859455D4CEDA"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC4448FE-8B97-44A8-ADC4-9041751084AD"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C95A3680-677E-4862-801D-AFA4391D8828"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA87C76B-898B-4978-BD3E-4FB04C18CBAC"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CFF9F60-0181-4ABA-B6F3-45E7460E4E05"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5306D96-3FCA-467D-AE66-37BEFB44ACFA"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.21.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D34BD47A-A20F-498E-856A-12BADA8A666D"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E548339-70C7-4346-B23A-7D2C3ABC7486"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "936CA7DC-AB5C-4E6F-B50D-71E0408F06B2"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.23.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59D2E42A-FDD0-4A30-A62D-E17AC027C768"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.23.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3071F8CA-748D-44A7-AAE9-FC5F2E50ED15"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF92294F-9ABE-4038-B3DA-C16C0515666D"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "500BE334-4811-440D-BF65-0D1DC3328FAB"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C16C002-2F14-4926-9CF2-50745EA0F62B"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AF093A7-6343-4EBE-9A06-AE670F4D9119"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E93A0CE-2B4B-498F-95E4-C33D1850C876"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.28.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "181E1DF5-CB65-4219-96AF-82C270B7EAA4"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.28.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A033047B-8178-4BCC-AAC1-944EC0FE0143"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "626382E0-7A71-4191-A92C-058E36850D66"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6381407B-C185-4A08-94A4-7325B693DFA6"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1818BA74-491B-4C7C-AAFF-9CB7E7CBCEAC"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.31.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F731579-C039-4631-A159-3F03C15CE9BE"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.31.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4393F949-DB12-4AC2-9DF5-FCBDCE366261"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.31.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE317122-A3D1-4FD2-9712-8458A009F9E9"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.31.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94A469D5-9AC7-4D47-8FCC-905D45CE096F"
},
{
"criteria": "cpe:2.3:a:cartpauj:mingle-forum:1.0.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F976A13-60CA-47C1-8A56-40FC20F120B6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}