CVE-2002-0108

UNKNOWN

Allaire Forums 2

Published Mar 15, 2002

Modified 1 years ago

Details

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

References

WEB

http://online.securityfocus.com/archive/1/249026

WEB

http://www.iss.net/security_center/static/7841.php

ADVISORY

http://www.kb.cert.org/vuls/id/575619

WEB

http://www.securityfocus.com/bid/3827

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2002-0108

CVSS Analysis

CVSS v2.0

7.5

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedMar 15, 2002

ModifiedAug 8, 2024