HighCVSS 7.5
EPSS 2.8%
Public exploit
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1.