CVE

Id
8311  
CVE No.
CVE-2003-1487  
Status
Candidate  
Description
Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.  
Phase
Assigned (20071024)  
Votes
None (candidate not yet proposed)  
Comments