CVE-2004-1518

Phorum 5.0.12 and earlier is affected by an SQL injection in follow.php triggered through the forum_id parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands, indicating the issue lies in improper handling/validation of the forum_id input. Affected produc...

[waraxe-2004-SA#037 - Sql injection bug in Phorum 5.0.12 and older versions]

================================================================================ waraxe-2004-SA037 ================================================================================ Sql injection bug in Phorum 5.0.12 and older versions...