SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Phorum | Phorum | 5.0.12 | 5.0.12 |
Phorum | Phorum | 5.0.10 | 5.0.10 |
Phorum | Phorum | 5.0.11 | 5.0.11 |
Phorum | Phorum | 5.0.9 | 5.0.9 |
Phorum | Phorum | 5.0.7_beta | 5.0.7_beta |
Phorum | Phorum | 5.0.3_beta | 5.0.3_beta |