CVE-2000-1228

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.46% chance of exploitation in the next 30 days, 83th percentile

Published

2005-07-14

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20586

References

• CVE Record
• NVD entry

Related

• CVE-2000-1224
• CVE-2000-1230
• CVE-2000-1221
• CVE-2000-1234
• CVE-2000-1220
• CVE-2000-1243