CVEvulnerability
CVE-2000-0125
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-02-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Affected configurations
• wired community software wwwthreads
References
- http://www.securityfocus.com/bid/967 www.securityfocus.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net www.securityfocus.com
- http://www.securityfocus.com/bid/967 www.securityfocus.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net www.securityfocus.com