CVE-2004-2110: SQL Injection
Published Dec 31, 2004
·Updated
SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hideemail parameter.
Affected Software
1 affected component
Phorum Phorum<=3.4.5
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2110?
CVE-2004-2110 has a severity rating of medium due to its potential for SQL injection attacks.
2
How do I fix CVE-2004-2110?
To fix CVE-2004-2110, upgrade Phorum to version 3.4.6 or later where the vulnerability is patched.
3
What does CVE-2004-2110 exploit?
CVE-2004-2110 exploits an SQL injection vulnerability through the hide_email parameter in register.php.
4
Which versions of Phorum are affected by CVE-2004-2110?
CVE-2004-2110 affects Phorum versions prior to 3.4.6, specifically 3.4.5 and earlier.
5
Can CVE-2004-2110 lead to data loss?
Yes, CVE-2004-2110 can lead to data loss as attackers may execute arbitrary SQL commands.