CVE-2008-1486

Phorum vulnerability CVE-2008-1486 affects Phorum before version 5.2.6. When mysql_use_ft is disabled, an attacker can perform SQL injection through the non-fulltext search, enabling arbitrary SQL commands on the backend. The CVSS-derived assessment in the connected records cites network access w...