Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php.
2006-07-18T15:46:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 5.5 (MEDIUM)
AV:N/AC:L/Au:S/C:P/I:P/A:N
8.0
4.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | phorum | phorum | ≤ 5.1.14 | Yes |
| Application | phorum | phorum | 3.0.7 | Yes |
| Application | phorum | phorum | 3.1 | Yes |
| Application | phorum | phorum | 3.1.1 | Yes |
| Application | phorum | phorum | 3.1.1_pre | Yes |
| Application | phorum | phorum | 3.1.1_rc2 | Yes |
| Application | phorum | phorum | 3.1.1a | Yes |
| Application | phorum | phorum | 3.1.2 | Yes |
| Application | phorum | phorum | 3.2 | Yes |
| Application | phorum | phorum | 3.2.2 | Yes |
| Application | phorum | phorum | 3.2.3 | Yes |
| Application | phorum | phorum | 3.2.3a | Yes |
| Application | phorum | phorum | 3.2.3b | Yes |
| Application | phorum | phorum | 3.2.4 | Yes |
| Application | phorum | phorum | 3.2.5 | Yes |
| Application | phorum | phorum | 3.2.6 | Yes |
| Application | phorum | phorum | 3.2.7 | Yes |
| Application | phorum | phorum | 3.2.8 | Yes |
| Application | phorum | phorum | 3.3.1 | Yes |
| Application | phorum | phorum | 3.3.1a | Yes |
| Application | phorum | phorum | 3.3.2 | Yes |
| Application | phorum | phorum | 3.3.2a | Yes |
| Application | phorum | phorum | 3.3.2b3 | Yes |
| Application | phorum | phorum | 3.4 | Yes |
| Application | phorum | phorum | 3.4.1 | Yes |
| Application | phorum | phorum | 3.4.2 | Yes |
| Application | phorum | phorum | 3.4.3 | Yes |
| Application | phorum | phorum | 3.4.4 | Yes |
| Application | phorum | phorum | 3.4.5 | Yes |
| Application | phorum | phorum | 3.4.6 | Yes |
| Application | phorum | phorum | 3.4.7 | Yes |
| Application | phorum | phorum | 3.4.8 | Yes |
| Application | phorum | phorum | 3.4.8a | Yes |
| Application | phorum | phorum | 4.3.7 | Yes |
| Application | phorum | phorum | 5.0.0_alpha | Yes |
| Application | phorum | phorum | 5.0.1_alpha | Yes |
| Application | phorum | phorum | 5.0.2_alpha | Yes |
| Application | phorum | phorum | 5.0.3_beta | Yes |
| Application | phorum | phorum | 5.0.4_beta | Yes |
| Application | phorum | phorum | 5.0.4a_beta | Yes |
| Application | phorum | phorum | 5.0.5_beta | Yes |
| Application | phorum | phorum | 5.0.6_beta | Yes |
| Application | phorum | phorum | 5.0.7_beta | Yes |
| Application | phorum | phorum | 5.0.7a_beta | Yes |
| Application | phorum | phorum | 5.0.8_rc | Yes |
| Application | phorum | phorum | 5.0.9 | Yes |
| Application | phorum | phorum | 5.0.10 | Yes |
| Application | phorum | phorum | 5.0.11 | Yes |
| Application | phorum | phorum | 5.0.12 | Yes |
| Application | phorum | phorum | 5.0.13 | Yes |
| Application | phorum | phorum | 5.0.13a | Yes |
| Application | phorum | phorum | 5.0.14 | Yes |
| Application | phorum | phorum | 5.0.14a | Yes |
| Application | phorum | phorum | 5.0.15 | Yes |
| Application | phorum | phorum | 5.0.15a | Yes |
| Application | phorum | phorum | 5.0.16 | Yes |
| Application | phorum | phorum | 5.0.17 | Yes |
| Application | phorum | phorum | 5.0.17a | Yes |
| Application | phorum | phorum | 5.0.18 | Yes |
| Application | phorum | phorum | 5.0.19 | Yes |
| Application | phorum | phorum | 5.0.20 | Yes |
| Application | phorum | phorum | 5.1.13 | Yes |