CVE-2000-1232 Missing authorization in n/a
Remote attackers can modify Phorum database tables via upgrade.php3 due to missing authorization checks.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-1232?
CVE-2000-1232 is a medium-severity missing authorization vulnerability in Phorum Phorum, published on 14 Jul 2005. It can be exploited over the network, with no action from the victim.
Official description
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
Which versions are affected by CVE-2000-1232?
It affects 1 product.
Products include Phorum Phorum.
How do I fix CVE-2000-1232?
No fix has been published for CVE-2000-1232 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2000-1232 being exploited?
There is no known exploitation of CVE-2000-1232 in the wild and no public exploit code.
Other vulnerabilities in Phorum Phorum
Sources
Also known as GHSA-p7qh-m3xx-q4cm.