SQL Injection Vulnerability in pforum by pforum

CVE-2002-0287

What is CVE-2002-0287?

The pforum web forum software, specifically version 1.14 and earlier, is vulnerable to SQL injection attacks due to insufficient handling of PHP magic quotes. If the server is not configured to use magic quotes, an attacker can exploit this vulnerability to bypass authentication mechanisms and potentially gain administrative access. This flaw poses significant risks for web applications utilizing pforum, enabling unauthorized users to execute malicious SQL commands that can compromise the integrity and security of the system.

References