CVE-2000-1231

CVE-2000-1231

Medium · published December 31, 2000

CVSS v2.0

5.0

EPSS

2%

Percentile

74.7

In the wild

Unconfirmed

What it is

code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.

The record

Technical detail

CVSS v2.0: 5.0 · MEDIUM
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.01548 · 74.7th percentile
Published: 2000-12-31T10:00Z

Affected products (1)

Product	Versions	Fixed in
phorum/phorum	all versions	—

References (6)

http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · [email protected]http://hispahack.ccc.de/mi020.html · [email protected]http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · [email protected]http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · af854a3a-2127-422b-91ae-364da2661108 http://hispahack.ccc.de/mi020.html · af854a3a-2127-422b-91ae-364da2661108 http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

14 JUL 04:00Z
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string
cvelistv5