VULNERABILITY INTELLIGENCE

CVE-2003-1487

CVSS score10 HIGH
EPSS probability8.03%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references