PT-2004-2426 · Phorum · Phorum

Janek Vind

+1

·

CVE-2004-1518

·

Published

2004-12-31

·

Updated

2017-07-11

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Phorum versions 5.0.12 and earlier
Description The issue allows remote authenticated users to execute arbitrary SQL commands via the forum id parameter in the "follow.php" file.
Recommendations For Phorum versions 5.0.12 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2004-1518

Affected Products

Phorum