Intrusion PreventionWP-Forum.WordPress.Plugin.Multiple.SQL.Injection
Description
This indicates an attack attempt against a SQL injection vulnerability in WP-Forum.
The software's failure to sanitized user supplied input makes it vulnerable to SQL Injection and Blind SQL Injection attacks, which may allow remote attackers to execute arbitrary SQL commands.
Affected Products
WP-Forum WP-Forum 1.7.8
WP-Forum WP-Forum 1.7.4
WP-Forum WP-Forum 2.3
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Upgrade to the latest version, available from the website.
http://www.fahlstad.se/wp-plugins/wp-forum/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 27245 |
| Created | Jul 07, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2009-3703 |
| Exploit Prediction Score | 0.07% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |