CVE-2002-0764

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the…

published July 26, 2002

CVSS
—
EPSS
38%
Percentile
98.6
In the wild
Unconfirmed
What it is

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38301 · 98.6th percentile
Published
2002-07-26T04:00Z
EPSS history
Timeline
  • 26 JUL 04:00Z
    Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the…
    cvelistv5