CVE-2004-2240

Description

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17847

http://www.securityfocus.com/bid/11538

http://www.maxpatrol.com/mp_advisory.asp

http://secunia.com/advisories/12980

http://phorum.org/cvs-changelog-5.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS