Back to CVE Browser

CVE-2003-1466

HIGH

7.5

CVSS Severity Score

EPSS Score0.0670%

EPSS Percentile41.99th

PublishedDec 31, 2003

Last ModifiedApr 16, 2026

Vulnerability Description

Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.

Affected Platforms (CPE)

📦

Phorum

Phorum

= 3.4

📦

Phorum

Phorum

= 3.4.1

📦

Phorum

Phorum

= 3.4.2

References & Advisories

🔗 http://securityreason.com/securityalert/3288

🔗 http://www.securityfocus.com/archive/1/321310

🔗 http://www.securityfocus.com/bid/7581

🔗 http://www.securityfocus.com/bid/7583

🔗 http://securityreason.com/securityalert/3288

🔗 http://www.securityfocus.com/archive/1/321310

🔗 http://www.securityfocus.com/bid/7581

🔗 http://www.securityfocus.com/bid/7583

Related Vulnerabilities

CVE-2003-148710.0

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and ...

CVE-2002-07647.5

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) d...

CVE-2000-12337.5

SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL querie...

CVE-2004-00357.5

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands...