CVE-2003-1487 Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (...
HighCVSS 10.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phorum | = 3.4 | No fix listed |
| phorum | = 3.4.1 | No fix listed |
| phorum | = 3.4.2 | No fix listed |
References
- 3288 third-party-advisory
- 20030513 Phorum Vulnerabilities mailing-list
- 7574 patch vdb-entry
- 7578 patch vdb-entry
- 7579 patch vdb-entry
- phorum-command-execution(12500) vdb-entry