6.4med
CVE-2003-11761 exploit
post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private foru…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
6.4
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.2%
percentile 94%
Public exploits
1
Exploit-DB
Summary
post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.
Exploit prediction (EPSS)
7.17% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- EDB-23331 Web Wiz Forum 6.34/7.0/7.5 - Unauthorized Private Forum Access · webapps · 2003-11-03
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N |
References
- securityfocus.com /bid/8957 · vdb-entry, x_refsource_BID, x_transferred
- osvdb.org /2768 · vdb-entry, x_refsource_OSVDB, x_transferred
- secunia.com /advisories/10137 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityfocus.com /archive/1/343175 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/13581 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /archive/1/343314 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securitytracker.com /id?1008100 · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2003-1176
- NVD: CVE-2003-1176
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.