CVE-2008-1486: SQL Injection
Published Mar 24, 2008
·Updated
SQL injection vulnerability in Phorum before 5.2.6, when mysqluseft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.
Affected Software
40 affected components
Phorum Phorum<=5.2.5
Phorum Phorum=5.0.0_alpha
Phorum Phorum=5.0.1_alpha
Phorum Phorum=5.0.2_alpha
Phorum Phorum=5.0.3_beta
Phorum Phorum=5.0.4_beta
Phorum Phorum=5.0.4a_beta
Phorum Phorum=5.0.5_beta
Phorum Phorum=5.0.6_beta
Phorum Phorum=5.0.7_beta
Phorum Phorum=5.0.7a_beta
Phorum Phorum=5.0.8_rc
Phorum Phorum=5.0.9
Phorum Phorum=5.0.10
Phorum Phorum=5.0.11
Phorum Phorum=5.0.12
Phorum Phorum=5.0.13
Phorum Phorum=5.0.13a
Phorum Phorum=5.0.14
Phorum Phorum=5.0.14a
Phorum Phorum=5.0.15
Phorum Phorum=5.0.15a
Phorum Phorum=5.0.16
Phorum Phorum=5.0.17
Phorum Phorum=5.0.17a
Phorum Phorum=5.0.18
Phorum Phorum=5.0.19
Phorum Phorum=5.0.20
Phorum Phorum=5.1.13
Phorum Phorum=5.1.14
Phorum Phorum=5.1.17
Phorum Phorum=5.1.18
Phorum Phorum=5.1.20
Phorum Phorum=5.1.21
Phorum Phorum=5.1.25
Phorum Phorum=5.2
Phorum Phorum=5.2.1
Phorum Phorum=5.2.2-beta
Phorum Phorum=5.2.3-rc1
Phorum Phorum=5.2.4-rc2
Remediation
Patch Available
Event History
Mar 24, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1486?
CVE-2008-1486 is classified as a medium severity vulnerability affecting Phorum versions before 5.2.6.
2
How do I fix CVE-2008-1486?
To fix CVE-2008-1486, upgrade to Phorum version 5.2.6 or later.
3
What type of vulnerability is CVE-2008-1486?
CVE-2008-1486 is an SQL injection vulnerability that allows for the execution of arbitrary SQL commands.
4
Which versions of Phorum are affected by CVE-2008-1486?
CVE-2008-1486 affects Phorum versions 5.0.1_alpha through 5.2.5.
5
Can remote attackers exploit CVE-2008-1486?
Yes, CVE-2008-1486 allows remote attackers to exploit the vulnerability to execute arbitrary SQL commands.