PT-2006-4143 · Phorum · Phorum

Published 2006-06-27 · Updated 2024-08-07 · CVE-2006-3249

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Phorum versions 5.1.14 and earlier

Description A SQL injection issue in the search.php file allows remote attackers to potentially execute arbitrary SQL commands via the page parameter. However, the vendor disputes this report, stating that using a non-positive integer or non-integer for the page parameter causes the query to break due to a negative number in the LIMIT clause, but it is not a SQL injection error. The original report comes from a researcher with mixed accuracy, and as of the given date, there is no additional information regarding this issue.

Recommendations For Phorum versions 5.1.14 and earlier, consider validating and sanitizing the page parameter to prevent potential SQL injection attacks. As a temporary workaround, restrict the page parameter to only accept positive integers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3249

Affected Products

Phorum

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-3249 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3249 · Note
• https://t.me/cvenotify/89787 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27369 · Note
• http://phorum.org/phorum5/read.php?14%2C114358 · Note
• http://phorum.org/cgi-bin/trac.cgi/ticket/382#preview · Note
• http://pridels0.blogspot.com/2006/06/phorum-sql-injection-vuln.html · Note
• http://osvdb.org/27165 · Note