CVE-2000-1234: Phorum

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.

Affected products

• Phorum Phorum: version 3.0.7 only

Published 2000-12-31. Last modified 2026-09-23.