Lucene search
HistoryOct 09, 2007 - 10:00 a.m.
CVE-2004-2733
cve-2004-2733
web wiz forums
remote attackers
user privileges
security vulnerability
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
88.0%
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
Affected configurations
Node
webwizweb_wiz_forumsMatch7.7a
| CPE | Name | Operator | Version |
|---|---|---|---|
| webwiz:web_wiz_forums | webwiz web wiz forums | eq | 7.7 |
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
88.0%
Related for CVE-2004-2733