Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Phorum 3.0.7 auth.php3验证模块存在后门漏洞
Vulnerability Description
Phorum是Phorum团队开发的一套基于PHP和MySQL的开源论坛应用程序。 Phorum的auth.php3是其它文件的访问控制模块，auth.php3存在一个通用口令，远程攻击者只需在URL里加上PHP_AUTH_USER=boogieman就可以使用"boogieman"通过auth.php3的验证访问受保护的文件。 远程攻击者可以利用这个漏洞获得对Phorum的控制，并且可以结合Phorum的其它漏洞访问系统的本地文件。
CVSS Information
N/A
Vulnerability Type
N/A