← Database

CVE-2004-2240

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.

Affected Platforms

Phorum Phorum

Weakness Type

NVD-CWE-Other

References