CVE-2003-1487

Published: Dec 31, 2003Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.

Affected (3)

Products: Phorum: Phorum

Phorum

1 product

Phorum

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Phorum Phorum	Version 3.4.1
Phorum Phorum	Version 3.4.2
Phorum Phorum	Version 3.4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://securityreason.com/securityalert/3288

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/321310

Source: cve@mitre.org

http://www.securityfocus.com/bid/7574

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/7578

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/7579

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/12500

Source: cve@mitre.org

http://securityreason.com/securityalert/3288