CVE-2000-1228 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 2.5% (pctl 84)
Patch early
A public exploit exists.
Description
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| EPSS | 2.46% — more likely to be exploited than 84% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2000-12-31 |
| Last modified | 2026-09-23 |
Affected (1)
| Vendor | Product |
|---|---|
| phorum | phorum |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Phorum 3.0.7 - 'admin.php3' Unverified Administrative Password Change | 2000-01-06 |
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html
- http://hispahack.ccc.de/mi020.html
- http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
- http://www.securityfocus.com/bid/2271
- http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html
- http://hispahack.ccc.de/mi020.html
- http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
- http://www.securityfocus.com/bid/2271
→ the Explorer · watch your stack · NVD