CVE-2000-1230

CVE-2000-1230

Medium · published December 31, 2000

CVSS v2.0
5.0
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03252 · 88.2th percentile
Published
2000-12-31T10:00Z
Affected products (1)
ProductVersionsFixed in
phorum/phorumall versions—
References (8)
http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · [email protected]http://hispahack.ccc.de/mi020.html · [email protected]http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · [email protected]http://www.securityfocus.com/bid/2274 · [email protected]http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · af854a3a-2127-422b-91ae-364da2661108http://hispahack.ccc.de/mi020.html · af854a3a-2127-422b-91ae-364da2661108http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/2274 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 JUL 04:00Z
    Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to…
    cvelistv5