Vulnerability Name:

CVE-2008-1486

Assigned:2008-01-07
Published:2008-01-07
Updated:2017-08-07
Summary:SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.
CVSS v3 Severity:7.3 High (CCN CVSS v3 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-89
References:Source: CONFIRM
Type: PATCH
http://www.phorum.org/phorum5/read.php?64,126815,126815

Source: BID
Type: UNKNOWN
28540

Source: XF
Type: UNKNOWN
phorum-nonfulltext-sql-injection(41418)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:phorum:phorum:5.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.2:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.2.4:rc2:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.2.3:rc1:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.2.2:beta:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.25:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.21:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.20:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.18:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.17:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.14:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.1.13:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.9:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.20:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.19:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.18:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.17a:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.17:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.16:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.15a:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.15:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.14:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.13:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.12:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.11:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.10:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*
  • OR cpe:/a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*

  • Denotes that component is vulnerable
    BACK
    phorum phorum 5.2.5
    phorum phorum 5.2
    phorum phorum 5.2.4 rc2
    phorum phorum 5.2.3 rc1
    phorum phorum 5.2.2 beta
    phorum phorum 5.1.25
    phorum phorum 5.2.1
    phorum phorum 5.1.21
    phorum phorum 5.1.20
    phorum phorum 5.1.18
    phorum phorum 5.1.17
    phorum phorum 5.1.14
    phorum phorum 5.1.13
    phorum phorum 5.0.9
    phorum phorum 5.0.8_rc
    phorum phorum 5.0.7a_beta
    phorum phorum 5.0.7_beta
    phorum phorum 5.0.6_beta
    phorum phorum 5.0.5_beta
    phorum phorum 5.0.4a_beta
    phorum phorum 5.0.4_beta
    phorum phorum 5.0.3_beta
    phorum phorum 5.0.20
    phorum phorum 5.0.2_alpha
    phorum phorum 5.0.19
    phorum phorum 5.0.18
    phorum phorum 5.0.17a
    phorum phorum 5.0.17
    phorum phorum 5.0.16
    phorum phorum 5.0.15a
    phorum phorum 5.0.15
    phorum phorum 5.0.14a
    phorum phorum 5.0.14
    phorum phorum 5.0.13a
    phorum phorum 5.0.13
    phorum phorum 5.0.12
    phorum phorum 5.0.11
    phorum phorum 5.0.10
    phorum phorum 5.0.1_alpha
    phorum phorum 5.0.0_alpha