CVE-2004-1938

SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.23% chance of exploitation in the next 30 days, 67th percentile

Published

2005-05-10

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://www.waraxe.us/index.php?modname=sa&id=19

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24016

References

• CVE Record
• NVD entry

Related

• CVE-2004-1937
• CVE-2004-1939
• CVE-2004-1935
• CVE-2004-1940
• CVE-2004-1934
• CVE-2004-1943