CVE-2000-1228

N/A

Description

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

Details CVE

Score CVSS v3.1N/A

Publie12/31/2000

Derniere modification4/16/2026

Sourcenvd

Observations honeypot0

Produits affectes

phorum:phorum

References

http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html(cve@mitre.org)

http://hispahack.ccc.de/mi020.html(cve@mitre.org)

http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm(cve@mitre.org)

http://www.securityfocus.com/bid/2271(cve@mitre.org)

http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html(af854a3a-2127-422b-91ae-364da2661108)

http://hispahack.ccc.de/mi020.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/2271(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.