| Package | Affected versions | Patched versions |
|---|---|---|
| phorum | = 5.0.0_alpha= 5.0.10= 5.0.11= 5.0.12= 5.0.13= 5.0.13a= 5.0.14= 5.0.14a= 5.0.15= 5.0.16= 5.0.17= 5.0.18= 5.0.19= 5.0.1_alpha= 5.0.20= 5.0.2_alpha= 5.0.3_beta= 5.0.4_beta= 5.0.4a_beta= 5.0.5_beta= 5.0.6_beta= 5.0.7_beta= 5.0.7a_beta= 5.0.8_rc= 5.0.9 |
SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the forum_ids parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free