CVE-2000-1228
Low
No strong exploitation signal.
CVSS base
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS — probability of exploitation (30 days)
2.5%
83.8th percentile
CISA KEV
Not listed
Weakness / dates
—
Published 2000-12-31 · modified 2026-09-23
CVSS breakdown
AV:N/AC:L/Au:N/C:N/I:P/A:N
| Attack Vector | N | Network |
| Attack Complexity | L | Low |
| Authentication | N | None |
| Confidentiality | N | None |
| Integrity | P | Partial |
| Availability | N | None |
Timeline
- 2000-12-31 — Published (NVD)
- 2026-09-23 — Last modified (NVD)
Description
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
Affected
References
- exploit http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html
- http://hispahack.ccc.de/mi020.html
- http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
- exploit http://www.securityfocus.com/bid/2271
- exploit http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html
- http://hispahack.ccc.de/mi020.html
- http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm
- exploit http://www.securityfocus.com/bid/2271