CVE-2004-2243

CVE-2004-2243 describes a session hijacking vulnerability in Phorum, potentially version 4.3.7, where remote attackers can steal and replay session hashes from the phorum_uriauth parameter to impersonate other users, specifically demonstrated via profile.php. This vulnerability carries a CVSS score of 7.5, indicating a high severity with a network attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.