CVE-2019-19111

概要

参考情報

• twitter.com/Sh0ckFR/status/1257298443527053313 · Exploit

wpforo のその他の脆弱性

• CVE-2019-19112中 6.1The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php.
• CVE-2019-19110中 4.8The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.
• CVE-2019-19109高 8.8The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF.
• CVE-2018-11515緊急 9.8The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.