CVE-2004-2733 Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_...
MediumCVSS 5.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webwiz web wiz forums | = 7.7-a | No fix listed |
References
- 20040430 Critical bug in Web Wiz Forum mailing-list
- 11525 third-party-advisory vendor-advisory
- 1010012 vdb-entry
- 5750 vdb-entry
- 5751 vdb-entry
- 10255 vdb-entry
- webwizforums-popuptopicadmin-modify(16030) vdb-entry
- webwizforums-unauth-ip-blocking(16031) vdb-entry