What is CVE-2012-5328?

CVE-2012-5328 is a vulnerability in Cartpauj Mingle-Forum, classified under SQL Injection. Published 2012-10-08.

Is CVE-2012-5328 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Cartpauj Mingle-Forum

CVE-2012-5328

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the (1) memberid or (2) groupid parameters in a removemember action or (3) id parameter to fs-admin/fs-admin.php, or (4) edit_forum_id parameter in an edit_save_forum action to fs-admin/wpf-edit-forum-group.php.

Vulnerability class: SQL Injection

EPSS: 0.015 (71.9th percentile) — read the EPSS interpretation.

Affected products

Cartpauj Mingle-forum — versions 1.0.00, 1.0.01, 1.0.02
Wordpress
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2012-5328?: CVE-2012-5328 is a vulnerability in Cartpauj Mingle-Forum, classified under SQL Injection. Published 2012-10-08.
Is CVE-2012-5328 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.