SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.
2008-03-24T23:44:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | phorum | phorum | ≤ 5.2.5 | Yes |
| Application | phorum | phorum | 5.0.0_alpha | Yes |
| Application | phorum | phorum | 5.0.1_alpha | Yes |
| Application | phorum | phorum | 5.0.2_alpha | Yes |
| Application | phorum | phorum | 5.0.3_beta | Yes |
| Application | phorum | phorum | 5.0.4_beta | Yes |
| Application | phorum | phorum | 5.0.4a_beta | Yes |
| Application | phorum | phorum | 5.0.5_beta | Yes |
| Application | phorum | phorum | 5.0.6_beta | Yes |
| Application | phorum | phorum | 5.0.7_beta | Yes |
| Application | phorum | phorum | 5.0.7a_beta | Yes |
| Application | phorum | phorum | 5.0.8_rc | Yes |
| Application | phorum | phorum | 5.0.9 | Yes |
| Application | phorum | phorum | 5.0.10 | Yes |
| Application | phorum | phorum | 5.0.11 | Yes |
| Application | phorum | phorum | 5.0.12 | Yes |
| Application | phorum | phorum | 5.0.13 | Yes |
| Application | phorum | phorum | 5.0.13a | Yes |
| Application | phorum | phorum | 5.0.14 | Yes |
| Application | phorum | phorum | 5.0.14a | Yes |
| Application | phorum | phorum | 5.0.15 | Yes |
| Application | phorum | phorum | 5.0.15a | Yes |
| Application | phorum | phorum | 5.0.16 | Yes |
| Application | phorum | phorum | 5.0.17 | Yes |
| Application | phorum | phorum | 5.0.17a | Yes |
| Application | phorum | phorum | 5.0.18 | Yes |
| Application | phorum | phorum | 5.0.19 | Yes |
| Application | phorum | phorum | 5.0.20 | Yes |
| Application | phorum | phorum | 5.1.13 | Yes |
| Application | phorum | phorum | 5.1.14 | Yes |
| Application | phorum | phorum | 5.1.17 | Yes |
| Application | phorum | phorum | 5.1.18 | Yes |
| Application | phorum | phorum | 5.1.20 | Yes |
| Application | phorum | phorum | 5.1.21 | Yes |
| Application | phorum | phorum | 5.1.25 | Yes |
| Application | phorum | phorum | 5.2 | Yes |
| Application | phorum | phorum | 5.2.1 | Yes |
| Application | phorum | phorum | 5.2.2 | Yes |
| Application | phorum | phorum | 5.2.3 | Yes |
| Application | phorum | phorum | 5.2.4 | Yes |