Unscored CVE-2004-0035 EUVD-2004-0035GHSA-qr4c-h294-m43m

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the …

Published Sep 1, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

References

20040105 Multiple Vulnerabilities in Phorum 3.4.5 mailing-list
10567 third-party-advisory
3508 vdb-entry
9363 vdb-entry
phorum-register-sql-injection(14146) vdb-entry