« Volver al listado

CVE-2012-6625

Estado: ModificadaAlta (7.5)—

SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vasthtml — Forumpress

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-6625",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-16T21:55:44.550",
  "references": [
    {
      "url": "http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-Injection-Cross-Site-Scripting.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://wordpress.org/extend/plugins/forum-server/changelog/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/53530",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://plugins.trac.wordpress.org/changeset/532918",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.org/files/112703/WordPress-WP-Forum-Server-1.7.3-SQL-Injection-Cross-Site-Scripting.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://wordpress.org/extend/plugins/forum-server/changelog/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/53530",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://plugins.trac.wordpress.org/changeset/532918",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid parameter in an editgroup action."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección de SQL en fs-admin/fs-admin.php en el plugin ForumPress WP Forum Server anterior a la versión 1.7.4 para WordPress permite a atacantes remotos ejecutar comandos de SQL arbitrarios a través del parámetro groupid en una acción editgroup."
    }
  ],
  "lastModified": "2026-06-16T23:48:30.113",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:*:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7DE1FCA6-0FFB-4E21-89EB-67DEB207A160",
              "versionEndIncluding": "1.7.4"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.0:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED0011BC-EC52-4A41-A100-163B27446558"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.1:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "091F53B6-D32E-4DEE-8D02-F775868648E8"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.2:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD493B30-DCB9-4FAC-9441-CACD70F59353"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.3:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B697EF72-29AD-4059-BF71-F49EA23CB8ED"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.4:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25E04C3F-C0E8-4BAF-9DAE-1D3119CB58F8"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.5:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3C27AA1-5DAC-4496-A05A-D5E18A623D02"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.5.1:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9A27934-D2F3-45FD-B9F1-AB2EF356EEDB"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.5.2:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD94030B-FD8B-412F-8896-E2C8AF4F2122"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41000CAF-A103-4BC8-94ED-22741F161F12"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.2:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31697454-8FE4-4555-BABE-F1C4A0C01EA2"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.3:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C75483E-FD07-412C-9722-8135658A9AAC"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.4:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EE9DEF1-430E-4CD4-9DF4-CAFE97D425E3"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.5:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F06D316-C303-4673-BA8C-16DC19ED7BB1"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.6:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1865B793-170B-49D7-A788-0758391C2C4E"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.7:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2970E25D-32AB-4DED-B573-AE296E3ABFC6"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.8:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AA6E04D-50FB-45D0-BD28-154307BE3444"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.6.9:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EE637AB-E282-494A-AC56-0893FF296A71"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "475293DD-1D29-460A-8891-20C6DAC69F5E"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7.1:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93292F02-BCC9-4C19-961E-03A3056DC6AC"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7.2:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4196969E-0797-4DD4-B790-877ABD3BA708"
            },
            {
              "criteria": "cpe:2.3:a:vasthtml:forumpress:1.7.3:-:-:*:-:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D6E6667-8609-407D-A40A-7C5423B60243"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}