Vulnerabilities > CVE-2004-0035 - Unspecified vulnerability in Phorum

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phorum

NVD

Published: 2004-01-20

Updated: 2024-11-20

Summary

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

Vulnerable Configurations

Part	Description	Count
Application	Phorum Phorum Phorum - Phorum Phorum 3.0.7 Phorum Phorum 3.1 Phorum Phorum 3.1.1 Phorum Phorum 3.1.2 Phorum Phorum 3.2 Phorum Phorum 3.2.2 Phorum Phorum 3.2.3 Phorum Phorum 3.2.4 Phorum Phorum 3.2.5 Phorum Phorum 3.2.6 Phorum Phorum 3.2.7 Phorum Phorum 3.2.8 Phorum Phorum 3.2.11 Phorum Phorum 3.3.1 Phorum Phorum 3.3.2 Phorum Phorum 3.4 Phorum Phorum 3.4.1 Phorum Phorum 3.4.2 Phorum Phorum 3.4.3 Phorum Phorum 3.4.4 Phorum Phorum 3.4.5	30

References

http://marc.info/?l=bugtraq&m=107340481804110&w=2
http://marc.info/?l=bugtraq&m=107340481804110&w=2
http://secunia.com/advisories/10567
http://secunia.com/advisories/10567
http://www.osvdb.org/3508
http://www.osvdb.org/3508
http://www.securityfocus.com/bid/9363
http://www.securityfocus.com/bid/9363
https://exchange.xforce.ibmcloud.com/vulnerabilities/14146
https://exchange.xforce.ibmcloud.com/vulnerabilities/14146