CVE-2007-2249: Phorum

Medium severity, CVSS 6.5. EPSS: 7% chance of exploitation in the next 30 days.

include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.

Affected products

• Phorum Phorum: up to and including 5.1.20

Published 2007-04-25. Last modified 2026-06-16.