CVE-2008-0279: Xforum

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbitrary SQL commands via the topic parameter. NOTE: the categorie parameter might also be affected.

Affected products

• Xforum Xforum: version 1.4 only

Published 2008-01-15. Last modified 2026-06-16.