CVE-2000-1228

CVE-2000-1228 affects Phorum 3.0.7. An unauthenticated remote attacker can change the administrator password by sending an HTTP request to admin.php3 that sets the variables step, option, confirm and newPssword. The description across sources corroborates that user authentication is bypassed to a...

CVE-2000-1228

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables...