CVE-2004-2240: SQL Injection
Published Dec 31, 2004
·Updated
Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.
Affected Software
1 affected component
Phorum Phorum=5.0.11
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 17, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2240?
CVE-2004-2240 is considered a critical vulnerability due to the potential for remote SQL injection attacks.
2
How do I fix CVE-2004-2240?
To fix CVE-2004-2240, upgrade to a version of Phorum later than 5.0.11 that has patched the SQL injection vulnerabilities.
3
What are the potential impacts of exploiting CVE-2004-2240?
Exploiting CVE-2004-2240 can allow attackers to execute arbitrary SQL commands on the database, leading to data manipulation or disclosure.
4
Which versions of Phorum are affected by CVE-2004-2240?
CVE-2004-2240 affects Phorum version 5.0.11 and earlier.
5
What attack vectors are associated with CVE-2004-2240?
CVE-2004-2240 allows SQL injection through the query string in read.php and potentially other vectors in file.php.