CVE-2000-1234

CVE-2000-1234

Medium · published December 31, 2000

CVSS v2.0
5.0
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.

The record
Technical detail
CVSS v2.0
5.0 · MEDIUM
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS v4.0
Not supplied
EPSS
0.03270 · 88.3th percentile
Published
2000-12-31T10:00Z
Affected products (1)
ProductVersionsFixed in
phorum/phorumall versions—
References (8)
http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · [email protected]http://www.securityfocus.com/bid/2272 · [email protected]http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · af854a3a-2127-422b-91ae-364da2661108http://hispahack.ccc.de/mi020.html · af854a3a-2127-422b-91ae-364da2661108http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/2272 · af854a3a-2127-422b-91ae-364da2661108http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · [email protected]http://hispahack.ccc.de/mi020.html · [email protected]
EPSS history
Timeline
  • 14 JUL 04:00Z
    violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and…
    cvelistv5