OSVDB ID: 35059

Title: Phorum include/controlcenter/users.php Multiple Method Remote Privilege Escalation

Info

Apr 19, 2007

Unknown

Dates

Unknown

Unknown

Location: Remote / Network Access
Impact: Loss of Integrity
Solution: Upgrade
Disclosure: Vendor Verified
OSVDB: Web Related

Upgrade to version 5.1.22 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Unknown or Incomplete

Security Tracker: 1017936
CVE ID: 2007-2249 (see also: NVD)
Bugtraq ID: 23616
Secunia Advisory ID: 24932
Related OSVDB ID: 35057 35060 35061 35062
VUPEN Advisory: ADV-2007-1479
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-04/0350.html
Vendor Specific News/Changelog Entry: http://www.phorum.org/story.php?76
Other Advisory URL: http://www.waraxe.us/advisory-49.html

Unknown or Incomplete

Direct URL: http://osvdb.org/35059