CVE-2008-1486

SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.

• phorum phorum (<= 5.2.5) • phorum phorum 5.0.0 alpha • phorum phorum 5.0.1 alpha • phorum phorum 5.0.2 alpha • phorum phorum 5.0.3 beta • phorum phorum 5.0.4 beta • phorum phorum 5.0.4a beta • phorum phorum 5.0.5 beta • phorum phorum 5.0.6 beta • phorum phorum 5.0.7 beta • phorum phorum 5.0.7a beta • phorum phorum 5.0.8 rc • phorum phorum 5.0.9 • phorum phorum 5.0.10 • phorum phorum 5.0.11 • phorum phorum 5.0.12 • phorum phorum 5.0.13 • phorum phorum 5.0.13a • phorum phorum 5.0.14 • phorum phorum 5.0.14a • phorum phorum 5.0.15 • phorum phorum 5.0.15a • phorum phorum 5.0.16 • phorum phorum 5.0.17 • phorum phorum 5.0.17a • phorum phorum 5.0.18 • phorum phorum 5.0.19 • phorum phorum 5.0.20 • phorum phorum 5.1.13 • phorum phorum 5.1.14 • phorum phorum 5.1.17 • phorum phorum 5.1.18 • phorum phorum 5.1.20 • phorum phorum 5.1.21 • phorum phorum 5.1.25 • phorum phorum 5.2 • phorum phorum 5.2.1 • phorum phorum 5.2.2 • phorum phorum 5.2.3 • phorum phorum 5.2.4