CVE-2000-1228 in Phorum
Summary
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 16213 | Phorum Password Reset admin.php3 improper authentication | 287 | Proof-of-Concept | Not defined | CVE-2000-1228 |
Reservation
07/14/2005
Disclosure
12/31/2000
Status
Confirmed
Entries
1