CVE-2000-1228

Published Dec 31, 2000 phorum

Overview

CVE-2000-1228 is a known-severity vulnerability affecting phorum phorum. It was published on December 31, 2000.

Technical Description

Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.

Remediation

Check the references section for vendor advisories and patches from phorum. Update phorum to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html Ref hispahack.ccc.de/mi020.html Ref www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm Ref www.securityfocus.com/bid/2271 Ref cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html Ref hispahack.ccc.de/mi020.html Ref www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm Ref www.securityfocus.com/bid/2271

Frequently Asked Questions

What is CVE-2000-1228?

CVE-2000-1228 is a known-severity vulnerability affecting phorum phorum. It was published on December 31, 2000.

How severe is CVE-2000-1228?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2000-1228?

How can CyberStrike help with CVE-2000-1228?

CyberStrike's AI-powered security agents can automatically detect CVE-2000-1228 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.