CVE-2004-2240

Vulnerability

Phorum 5.0.11 and earlier are vulnerable to multiple SQL injection flaws. The first vector exists in read.php where the query string is not properly sanitized, allowing an attacker to inject arbitrary SQL. A second vector exists in file.php via unknown parameters. [2]

Exploitation

An unauthenticated remote attacker can exploit these vulnerabilities by sending a crafted HTTP request to read.php with malicious SQL in the query string, or by targeting the unknown vectors in file.php. No authentication or special privileges are required. [2]

Impact

Successful exploitation allows an attacker to modify SQL statements, potentially leading to unauthorized access to or manipulation of the Phorum database, including disclosure of sensitive data or alteration of forum content. [2]

Mitigation

The vendor has not released a specific patch version in the available references. Users should upgrade to a version later than 5.0.11, as later releases likely contain fixes. The Phorum project has since evolved, and the latest version should be used. [1] [2]