CVE-2007-2250 Information disclosure in n/a

What is CVE-2007-2250?

CVE-2007-2250 is a medium-severity vulnerability in Phorum Phorum, published on 25 Apr 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.

Which versions are affected by CVE-2007-2250?

It affects 1 product.

Products include Phorum Phorum.

How do I fix CVE-2007-2250?

No fix has been published for CVE-2007-2250 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-2250 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-2250 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Phorum Phorum

• CVE-2003-1487 Command injection in n/a Critical 10.0
• CVE-2003-1466 Server-side request forgery in n/a High 7.5
• CVE-2007-2338 Cross-site request forgery in n/a High 7.5
• CVE-2007-2339 SQL injection in n/a High 7.5
• CVE-2006-6550 Code injection in n/a High 7.5

All Phorum Phorum vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gv7q-m6rf-wx37.