CVE-2003-1487: Phorum

High severity, CVSS 10.0. EPSS: 8% chance of exploitation in the next 30 days.

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.

Affected products

• Phorum Phorum: version 3.4 only; version 3.4.1 only; version 3.4.2 only

Published 2003-12-31. Last modified 2026-06-16.