Security Advisory
CVE-2000-1228
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.