CVE-2000-1228: Phorum

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

Affected products

• Phorum Phorum: version 3.0.7 only

Published 2000-12-31. Last modified 2026-09-23.