CVE-2007-2249 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-2249
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-2249

Description: include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.

CVE Status: Candidate

References: ST 1017936 SREASON http://securityreason.com/securityalert/2617 SAID Secunia Advisory: SA24932 OSVDB 35059 MISC http://www.waraxe.us/advisory-49.html CONFIRM http://www.phorum.org/story.php?76 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/466286/100/0/threaded BID 23616

Return to the previous page.