Vulnerability Database

299,751

Total vulnerabilities in the database

CVE-2003-1487

Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.

Published: Dec 31, 2003
Updated: Nov 9, 2025
CVE: CVE-2003-1487
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
phorum / phorum	3.4	3.4.x
phorum / phorum	3.4.2	3.4.2.x
phorum / phorum	3.4.1	3.4.1.x

http://securityreason.com/securityalert/3288
http://www.securityfocus.com/archive/1/321310
http://www.securityfocus.com/bid/7574
http://www.securityfocus.com/bid/7578
http://www.securityfocus.com/bid/7579
https://exchange.xforce.ibmcloud.com/vulnerabilities/12500

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo