Description
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.
References
- phorum-command-execution(12500) vdb-entry
- 7579 vdb-entry
- 7578 vdb-entry
- 3288 third-party-advisory
- 7574 vdb-entry
- 20030513 Phorum Vulnerabilities mailing-list