CVE-2002-0352 Information disclosure in n/a

What is CVE-2002-0352?

CVE-2002-0352 is a medium-severity vulnerability in Phorum Phorum, published on 3 May 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.

Which versions are affected by CVE-2002-0352?

It affects 1 product.

Products include Phorum Phorum.

How do I fix CVE-2002-0352?

No fix has been published for CVE-2002-0352 yet. Limit exposure of the affected software until one is available.

Is CVE-2002-0352 being exploited?

There is no known exploitation of CVE-2002-0352 in the wild and no public exploit code.

Other vulnerabilities in Phorum Phorum

• CVE-2003-1487 Command injection in n/a Critical 10.0
• CVE-2003-1466 Server-side request forgery in n/a High 7.5
• CVE-2007-2338 Cross-site request forgery in n/a High 7.5
• CVE-2007-2339 SQL injection in n/a High 7.5
• CVE-2006-6550 Code injection in n/a High 7.5

All Phorum Phorum vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xx6x-gw8p-x62c.