Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2249. PoCs published by Janek Vind.
AI-analyzed exploit summary The writeup describes a privilege escalation vulnerability in Phorum 5.1.20 due to insufficient input validation and uninitialized variables, allowing a moderator to escalate privileges to admin by manipulating the `user_ids` parameter.
Description
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.
Exploits (1)
The writeup describes a privilege escalation vulnerability in Phorum 5.1.20 due to insufficient input validation and uninitialized variables, allowing a moderator to escalate privileges to admin by manipulating the `user_ids` parameter.