Vulnerabilities > CVE-2004-2240 - Cross-Site Scripting and SQL Injection vulnerability in Phorum 5.0.11

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
phorum

Summary

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.

Vulnerable Configurations

Part Description Count
Application
Phorum
1