| Package | Affected versions | Patched versions |
|---|---|---|
| phorum | = 3.0.7 |
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free