TROYANOSYVIRUS
Back to CVEs

CVE-2004-2240

N/A

Description

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.

CVE Details

CVSS v3.1 ScoreN/A
Published12/31/2004
Last Modified4/16/2026
Sourcenvd
Honeypot Sightings0

Affected Products

phorum:phorum

References

http://phorum.org/cvs-changelog-5.txt(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/12980(af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1011921(af854a3a-2127-422b-91ae-364da2661108)
http://www.maxpatrol.com/advdetails.asp?id=15(af854a3a-2127-422b-91ae-364da2661108)
http://www.maxpatrol.com/mp_advisory.asp(af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/11129(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/11538(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.