CVE-2004-1518

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.

Ссылки

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html
Exploit
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110021385926870&w=2
http://secunia.com/advisories/13174
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11660
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18045
http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html
Exploit
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=110021385926870&w=2
http://secunia.com/advisories/13174
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11660
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18045

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*

cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00583

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7r5x-w2rg-rm39

github

почти 4 года назад