CVE:CVE-2005-3543
CNNVD:CNNVD-200511-216
Phorum是一个基于PHP+MySQL开发的开源论坛项目。
Phorum 5.0.0alpha至5.0.20的search.php中的SQL注入漏洞，在启用register_globals时，可让远程攻击者通过forum_ids参数执行任意SQL命令。
solution:Upgrade phorum phorum to a higher version than 5.0.0_alpha,5.0.1_alpha,5.0.2_alpha,5.0.3_beta,5.0.4_beta,5.0.4a_beta,5.0.5_beta,5.0.6_beta,5.0.7_beta,5.0.7a_beta,5.0.8_rc,5.0.9,5.0.10,5.0.11,5.0.12,5.0.13,5.0.13a,5.0.14,5.0.14a,5.0.15,5.0.16,5.0.17,5.0.18,5.0.19,5.0.20,and avoid the version 5.0.0_alpha,5.0.1_alpha,5.0.2_alpha,5.0.3_beta,5.0.4_beta,5.0.4a_beta,5.0.5_beta,5.0.6_beta,5.0.7_beta,5.0.7a_beta,5.0.8_rc,5.0.9,5.0.10,5.0.11,5.0.12,5.0.13,5.0.13a,5.0.14,5.0.14a,5.0.15,5.0.16,5.0.17,5.0.18,5.0.19,5.0.20