Unscored CVE-2002-0352 EUVD-2002-0349GHSA-xx6x-gw8p-x62c

Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.ph…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.

References

phorum-admin-users-information(8344) vdb-entry
4226 vdb-entry
20020302 Phorum Discussion Board Security Bug (Email Disclosure) mailing-list