CVEvulnerability
CVE-2004-2240
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.
Affected configurations
• phorum phorum 5.0.11
References
- http://phorum.org/cvs-changelog-5.txt phorum.org
- http://secunia.com/advisories/12980 Vendor Advisory
- http://securitytracker.com/id?1011921 Exploit
- http://www.maxpatrol.com/advdetails.asp?id=15 Exploit, Vendor Advisory
- http://www.maxpatrol.com/mp_advisory.asp www.maxpatrol.com
- http://www.osvdb.org/11129 Exploit, Patch
- http://www.securityfocus.com/bid/11538 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17847 exchange.xforce.ibmcloud.com
- http://phorum.org/cvs-changelog-5.txt phorum.org
- http://secunia.com/advisories/12980 Vendor Advisory
- http://securitytracker.com/id?1011921 Exploit
- http://www.maxpatrol.com/advdetails.asp?id=15 Exploit, Vendor Advisory
- http://www.maxpatrol.com/mp_advisory.asp www.maxpatrol.com
- http://www.osvdb.org/11129 Exploit, Patch
- http://www.securityfocus.com/bid/11538 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17847 exchange.xforce.ibmcloud.com