PT-2000-2009 · Phorum · Phorum

Published 2000-12-31 · Updated 2008-09-05 · CVE-2000-1230

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Phorum version 3.0.7

Description A backdoor in the auth.php3 file allows remote attackers to access restricted web pages by sending an HTTP request with the PHP AUTH USER parameter set to "boogieman".

Recommendations For Phorum version 3.0.7, update the auth.php3 file to remove the backdoor or apply a patch that fixes this issue. As a temporary workaround, consider restricting access to the auth.php3 file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-1230

Affected Products

Phorum

References · 7

• 🔥 https://exploit-db.com/exploits/20588 · Exploit
• 🔥 http://digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · Exploit
• 🔥 http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1230 · Security Note
• http://securityfocus.com/bid/2274 · Note
• http://hispahack.ccc.de/mi020.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1230 · Note