Lucene search

K
nvd[email protected]NVD:CVE-2003-1176
HistoryDec 31, 2003 - 5:00 a.m.

CVE-2003-1176

2003-12-3105:00:00
web.nvd.nist.gov

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.

Affected configurations

NVD
Node
bdc_enterprisesweb_wiz_forumsMatch6.34
OR
bdc_enterprisesweb_wiz_forumsMatch7.01
OR
bdc_enterprisesweb_wiz_forumsMatch7.5

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

Related for NVD:CVE-2003-1176