CVE-2000-1234

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
Configurations

Configuration 1 (hide)

cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*

History

20 Nov 2024, 23:34

Type Values Removed Values Added
References () http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - Exploit, Vendor Advisory () http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html - Exploit, Vendor Advisory
References () http://hispahack.ccc.de/mi020.html - () http://hispahack.ccc.de/mi020.html -
References () http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm - () http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm -
References () http://www.securityfocus.com/bid/2272 - Exploit, Patch () http://www.securityfocus.com/bid/2272 - Exploit, Patch

Information

Published : 2000-12-31 05:00

Updated : 2025-04-03 01:03


NVD link : CVE-2000-1234

Mitre link : CVE-2000-1234

CVE.ORG link : CVE-2000-1234


JSON object : View

Products Affected

phorum

  • phorum