Read the docs
TI-2012-04502 Aliases CVE-2012-5328GHSA-63pm-vcxc-hjg2

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other…

Priority LOW 32CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the (1) memberid or (2) groupid parameters in a removemember action or (3) id parameter to fs-admin/fs-admin.php, or (4) edit_forum_id parameter in an edit_save_forum action to fs-admin/wpf-edit-forum-group.php.

Why it matters now

EPSS 0.01512 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 44

CPEVersionsRoleVendor
cpe:2.3:a:cartpauj:mingle-forum:*:*:*:*:*:*:*:*up to 1.0.32.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.00:*:*:*:*:*:*:*1.0.00Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.01:*:*:*:*:*:*:*1.0.01Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.02:*:*:*:*:*:*:*1.0.02Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.03:*:*:*:*:*:*:*1.0.03Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.04:*:*:*:*:*:*:*1.0.04Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.05:*:*:*:*:*:*:*1.0.05Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.06:*:*:*:*:*:*:*1.0.06Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.07:*:*:*:*:*:*:*1.0.07Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.08:*:*:*:*:*:*:*1.0.08Vulnerablecartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:*:*:*:*:*:*:*:* Versions up to 1.0.32.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.00:*:*:*:*:*:*:* Versions 1.0.00 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.01:*:*:*:*:*:*:* Versions 1.0.01 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.02:*:*:*:*:*:*:* Versions 1.0.02 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.03:*:*:*:*:*:*:* Versions 1.0.03 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.04:*:*:*:*:*:*:* Versions 1.0.04 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.05:*:*:*:*:*:*:* Versions 1.0.05 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.06:*:*:*:*:*:*:* Versions 1.0.06 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.07:*:*:*:*:*:*:* Versions 1.0.07 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.08:*:*:*:*:*:*:* Versions 1.0.08 Vulnerable ·cartpauj
Show 34 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cartpauj:mingle-forum:1.0.09:*:*:*:*:*:*:*1.0.09Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.10:*:*:*:*:*:*:*1.0.10Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.11:*:*:*:*:*:*:*1.0.11Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.12:*:*:*:*:*:*:*1.0.12Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.13:*:*:*:*:*:*:*1.0.13Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.14:*:*:*:*:*:*:*1.0.14Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.15:*:*:*:*:*:*:*1.0.15Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.16:*:*:*:*:*:*:*1.0.16Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.17:*:*:*:*:*:*:*1.0.17Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.18:*:*:*:*:*:*:*1.0.18Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.19:*:*:*:*:*:*:*1.0.19Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.20:*:*:*:*:*:*:*1.0.20Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.21:*:*:*:*:*:*:*1.0.21Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.21.1:*:*:*:*:*:*:*1.0.21.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.22:*:*:*:*:*:*:*1.0.22Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.23:*:*:*:*:*:*:*1.0.23Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.23.1:*:*:*:*:*:*:*1.0.23.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.23.2:*:*:*:*:*:*:*1.0.23.2Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.24:*:*:*:*:*:*:*1.0.24Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.25:*:*:*:*:*:*:*1.0.25Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.26:*:*:*:*:*:*:*1.0.26Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.27:*:*:*:*:*:*:*1.0.27Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.28:*:*:*:*:*:*:*1.0.28Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.28.1:*:*:*:*:*:*:*1.0.28.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.28.2:*:*:*:*:*:*:*1.0.28.2Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.29:*:*:*:*:*:*:*1.0.29Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.30:*:*:*:*:*:*:*1.0.30Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31:*:*:*:*:*:*:*1.0.31Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.1:*:*:*:*:*:*:*1.0.31.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.2:*:*:*:*:*:*:*1.0.31.2Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.3:*:*:*:*:*:*:*1.0.31.3Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.4:*:*:*:*:*:*:*1.0.31.4Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.32:*:*:*:*:*:*:*1.0.32Vulnerablecartpauj
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*not specified by NVDRunning onWordPress
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.09:*:*:*:*:*:*:* Versions 1.0.09 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.21.1:*:*:*:*:*:*:* Versions 1.0.21.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.23:*:*:*:*:*:*:* Versions 1.0.23 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.23.1:*:*:*:*:*:*:* Versions 1.0.23.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.23.2:*:*:*:*:*:*:* Versions 1.0.23.2 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.28.1:*:*:*:*:*:*:* Versions 1.0.28.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.28.2:*:*:*:*:*:*:* Versions 1.0.28.2 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.29:*:*:*:*:*:*:* Versions 1.0.29 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.30:*:*:*:*:*:*:* Versions 1.0.30 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31:*:*:*:*:*:*:* Versions 1.0.31 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.1:*:*:*:*:*:*:* Versions 1.0.31.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.2:*:*:*:*:*:*:* Versions 1.0.31.2 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.3:*:*:*:*:*:*:* Versions 1.0.31.3 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.4:*:*:*:*:*:*:* Versions 1.0.31.4 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.32:*:*:*:*:*:*:* Versions 1.0.32 Vulnerable ·cartpauj
  • cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WordPress

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5328
  2. 2026-10-03 Alias added: GHSA-63pm-vcxc-hjg2

References

Other 2

  • TI-2013-00620 Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before… CVSS 2.0HIGH 7.5
  • TI-2013-00621 Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin… CVSS 2.0MEDIUM 6.8
  • TI-2012-04501 Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum… CVSS 2.0MEDIUM 6.5
  • TI-2013-00619 Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences