VulnerabilityModified
CVE-2004-2733
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
MEDIUM 5.8EPSS 1.46%
Does this matter?
Lower severity and a low EPSS score (1.46%). Track it; it rarely justifies an emergency change on its own.
Description
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
- EPSS
- 1.46% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- webwiz/web wiz forums
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-04/1119.html
- http://secunia.com/advisories/11525Vendor Advisory
- http://securitytracker.com/id?1010012
- http://www.osvdb.org/5750
- http://www.osvdb.org/5751
- http://www.securityfocus.com/bid/10255
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16031
- http://archives.neohapsis.com/archives/fulldisclosure/2004-04/1119.html
- http://secunia.com/advisories/11525Vendor Advisory
- http://securitytracker.com/id?1010012
- http://www.osvdb.org/5750
- http://www.osvdb.org/5751
- http://www.securityfocus.com/bid/10255
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16030
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16031
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.