CVE-2005-0677 index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.

MediumCVSS 5.0 EPSS 1.1%

Published: 2005-03-07 07:00
Updated: 2026-06-17 01:11
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.

Affected products

Product	Affected versions	Fixed in
phpoutsourcing zorum	= 3.5	No fix listed

References

1013365 exploit vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.11% (percentile 66.4)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.