CVE-2000-1228

N/A

Description

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

CVE Details

CVSS v3.1 ScoreN/A

Published12/31/2000

Last Modified4/16/2026

Sourcenvd

Honeypot Sightings0

Affected Products

phorum:phorum

References

http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html(cve@mitre.org)

http://hispahack.ccc.de/mi020.html(cve@mitre.org)

http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm(cve@mitre.org)

http://www.securityfocus.com/bid/2271(cve@mitre.org)

http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html(af854a3a-2127-422b-91ae-364da2661108)

http://hispahack.ccc.de/mi020.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/2271(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.