Vulnerabilities > CVE-2002-0352 - Information Disclosure vulnerability in Phorum 3.3.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |