CVE-2008-3191: Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, all...

Security readout for executives and security teams

CVE-2008-3191 is a legacy SQL injection issue in mForum 0.1a profile editing. If the vulnerable configuration is present, a remote attacker could manipulate database queries through profile fields. Business urgency depends on whether this old forum software still exists in your environment. Exposure appears limited to mForum 0.1a deployments, specifically where user profile editing is reachable and magic_quotes_gpc is disabled. The provided affected-product metadata is incomplete, so teams should validate by application inventory rather than CPE matching alone. Prioritize if any mForum 0.1a instance remains online. The product appears old, but SQL injection can expose or alter forum data, and public exploit references increase operational concern. Mitigation focus: Identify and retire any mForum 0.1a deployments.; Check vendor or maintainer guidance for any available fix.; Restrict access to profile-editing functionality until resolved..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.