CVE-2004-2243: Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash...

Security readout for executives and security teams

This is an old reported session-hijacking issue in Phorum. If an attacker obtains a user's session hash from the phorum_uriauth URL parameter, they may replay it to access that user's session. The affected version is uncertain, and the source bundle does not identify a confirmed fix. Exposure is most likely limited to legacy Phorum deployments that place reusable session material in the phorum_uriauth URL parameter. Internet-facing forums are the main concern. The affected version data is incomplete, so asset validation matters more than version matching alone. Prioritize review if the organization still operates legacy Phorum forums, especially internet-facing ones. The business risk is account takeover, but urgency is constrained by uncertain affected versions and no provided evidence of active exploitation. Mitigation focus: Inventory any remaining Phorum installations and document their versions.; Check Phorum vendor or project guidance for fixed versions or configuration changes.; Upgrade or retire unsupported Phorum instances where feasible..

Prepared

Jun 29, 2026, 19:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.