CVE-2002-0764: Phorum

High severity, CVSS 7.5. EPSS: 38.3% chance of exploitation in the next 30 days.

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.

Affected products

• Phorum Phorum: version 3.3.2a only

Published 2002-08-12. Last modified 2026-06-16.