• info
• discussion
• exploit
• solution
• references

Phorum Edit User Profile Arbitrary Command Execution Vulnerability

Solution:
The vendor has addressed this issue in the current version of the software.


Phorum Phorum 3.4

• Phorum phorum-3.4.3.tar.gz
  http://phorum.org/downloads/phorum-3.4.3.tar.gz

Phorum Phorum 3.4.1

• Phorum phorum-3.4.3.tar.gz
  http://phorum.org/downloads/phorum-3.4.3.tar.gz

Phorum Phorum 3.4.2

• Phorum phorum-3.4.3.tar.gz
  http://phorum.org/downloads/phorum-3.4.3.tar.gz