CVE-2004-1938 | BDVDB-2026-10018 Detail

Description#

SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12005-05-10Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.