CVE-2004-2240

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.

Affected (1)

Products: Phorum: Phorum

Phorum

1 product

Phorum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phorum Phorum	Version 5.0.11

References (16)

http://phorum.org/cvs-changelog-5.txt

Source: cve@mitre.org

http://secunia.com/advisories/12980

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1011921

Source: cve@mitre.org

Exploit

http://www.maxpatrol.com/advdetails.asp?id=15

Source: cve@mitre.org

ExploitVendor Advisory

http://www.maxpatrol.com/mp_advisory.asp

Source: cve@mitre.org

http://www.osvdb.org/11129

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/bid/11538

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17847

Source: cve@mitre.org

http://phorum.org/cvs-changelog-5.txt