CVE-2003-1487 | BDVDB-2026-27332 Detail

Description#

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/12500
http://www.securityfocus.com/bid/7579
http://www.securityfocus.com/bid/7578
http://securityreason.com/securityalert/3288
http://www.securityfocus.com/bid/7574
http://www.securityfocus.com/archive/1/321310

Exploit#

No public exploit known

History#

Version 12007-10-24Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.