CVE-2007-2249: Medium severity Phorum Phorum vulnerability
Published Apr 25, 2007
·Updated
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) userids POST parameter or (2) userdata array.
Affected Software
1 affected component
Phorum Phorum<=5.1.20
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 25, 2007
CVE Published
04:19 PM
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2249?
CVE-2007-2249 is categorized as a high severity vulnerability that allows privilege escalation.
2
How do I fix CVE-2007-2249?
To remediate CVE-2007-2249, you should upgrade Phorum to version 5.1.22 or later.
3
Who is affected by CVE-2007-2249?
CVE-2007-2249 affects remote authenticated moderators using Phorum versions prior to 5.1.22.
4
What does CVE-2007-2249 exploit?
CVE-2007-2249 exploits vulnerabilities in the user_ids POST parameter and userdata array in Phorum.
5
What are the consequences of CVE-2007-2249?
The consequences of CVE-2007-2249 include unauthorized privilege escalation for moderated users.