CVE-2000-1228

Phorum 3.0.7 - 'admin.php3' Unverified Administrative Password Change

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2000-1228 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.

Description

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBPhorum 3.0.7 - 'admin.php3' Unverified Administrative Password ChangeExploitDB exploitby Max VisionNot analyzed1 file
ExploitDB
PoC details

References

5