CVE-2000-1234

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters...

CVE-2000-1234

CVE-2000-1234: In Phorum 3.0.7, violation.php3 can be abused by remote attackers to send email to arbitrary addresses and possibly turn Phorum into a spam proxy by manipulating Mod and ForumName parameters. Affected: Phorum 3.0.7. Root cause: parameter handling in violation.php3 that enables emai...

Phorum 3.0.7 - 'violation.php3' Arbitrary Email Relay

source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin board style chats forums and discussions. A problem...