CVE-2003-1176

Published: Dec 31, 2003Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.

Affected (3)

Products: Bdc Enterprises: Web Wiz Forums

Bdc Enterprises

1 product

Web Wiz Forums

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Bdc Enterprises Web Wiz Forums	Version 6.34
Bdc Enterprises Web Wiz Forums	Version 7.01
Bdc Enterprises Web Wiz Forums	Version 7.5

References (14)

http://secunia.com/advisories/10137

Source: cve@mitre.org

http://securitytracker.com/id?1008100

Source: cve@mitre.org

http://www.osvdb.org/2768

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/343175

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/343314

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/8957

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/13581

Source: cve@mitre.org

http://secunia.com/advisories/10137