Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2000-1234

Description

violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.

POC

Reference

No PoCs from references.

Github

- https://github.com/SarahX/DWF-Documentation

- https://github.com/kurtseifried/gsd-data-enrichment