Unrated severityNVD Advisory· Published Dec 31, 2000· Updated Jun 16, 2026

CVE-2000-1228

Description

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phorum/Phorum2 versions
cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*
- (no CPE)range: =3.0.7

Patches

Vulnerability mechanics

References

cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.htmlnvdExploitPatchVendor Advisory
www.securityfocus.com/bid/2271nvdExploitPatch
hispahack.ccc.de/mi020.htmlnvd
www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htmnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000