CVE-2003-1176

EPSS 7.2%

post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/23331unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/10137 http://securitytracker.com/id?1008100 https://exchange.xforce.ibmcloud.com/vulnerabilities/13581 http://www.osvdb.org/2768 http://www.securityfocus.com/archive/1/343175 http://www.securityfocus.com/archive/1/343314 http://www.securityfocus.com/bid/8957