Vulnerabilities > CVE-2000-1234 - Unspecified vulnerability in Phorum 3.0.7

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
phorum
exploit available
NVD
Published: 2000-12-31
Updated: 2008-09-05

Summary

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.

Vulnerable Configurations

Part Description Count
Application
Phorum
1

Exploit-Db

descriptionPhorum 3.0.7 violation.php3 Arbitrary Email Relay Vulnerability. CVE-2000-1234 . Webapps exploit for php platform
idEDB-ID:20587
last seen2016-02-02
modified2000-01-01
published2000-01-01
reporterMax Vision
sourcehttps://www.exploit-db.com/download/20587/
titlePhorum 3.0.7 violation.php3 - Arbitrary Email Relay Vulnerability

References