CVE-2000-1228 | BDVDB-2026-11401 Detail

Description#

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/2271
http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html
http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
http://hispahack.ccc.de/mi020.html

Exploit#

No public exploit known

History#

Version 12005-07-14Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.