CVE:CVE-2004-2243
CNNVD:CNNVD-200412-1139
Phorum存在漏洞。远程攻击者通过偷窃和重放phorum_uriauth参数的会话散列劫持其他用户的会话，正如使用profile.php。
solution:Upgrade phorum phorum to a higher version than 4.3.7,and avoid the version 4.3.7