CVE-2008-0466

Summary: CVE-2008-0466 affects Web Wiz components (RTE_file_browser.asp) used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, where an unauthenticated remote attacker can list directories and read files. The vulnerability enables directory listings and file reads a...

CVE-2004-2733

The CVE-2004-2733 vulnerability concerns Web Wiz Forums 7.7a, where flawed privilege logic allows remote attackers to perform two actions: (1) block arbitrary IP addresses via pop_up_ip_blocking.asp and (2) modify topics via pop_up_topic_admin.asp. The NVD entry notes a network attack vector, no ...

CVE-2006-0175

CVE-2006-0175 is an XSS in Web Wiz Forums 6.34 where the search parameter processed by search_form.asp can inject arbitrary script/HTML. Affected component: the search parameter handling in Web Wiz Forums 6.34. Exploitation details in the connected sources are limited to a remote attacker inducin...

CVE-2019-25442

CVE-2019-25442 affects Web Wiz Forums 12.01 and describes an SQL injection vulnerability in the PF parameter. The flaw allows unauthenticated attackers to manipulate database queries by injecting SQL code via PF values in GET requests to member_profile.asp, enabling extraction of sensitive data. ...