Unscored CVE-2004-1518 EUVD-2004-1512GHSA-7r5x-w2rg-rm39

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command v…

Published Feb 19, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.

References

13174 third-party-advisory
20041111 [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions] mailing-list
20041111 [waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions] mailing-list
phorum-followphp-sql-injection(18045) vdb-entry
11660 vdb-entry