CVE-2003-1487

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-20

Description

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.

Affected products

Phorum: 3.4, 3.4.1, 3.4.2

References

http://securityreason.com/securityalert/3288
http://www.securityfocus.com/archive/1/321310
http://www.securityfocus.com/bid/7574
http://www.securityfocus.com/bid/7578
http://www.securityfocus.com/bid/7579
https://exchange.xforce.ibmcloud.com/vulnerabilities/12500
http://securityreason.com/securityalert/3288
http://www.securityfocus.com/archive/1/321310
http://www.securityfocus.com/bid/7574
http://www.securityfocus.com/bid/7578
http://www.securityfocus.com/bid/7579
https://exchange.xforce.ibmcloud.com/vulnerabilities/12500

Get alerted when CVE-2003-1487 or the next vulnerability affects your stack