CVEvulnerability
CVE-2002-0108
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
Affected configurations
• allaire forums 2.0.4
• allaire forums 2.0.5
• allaire forums 3.0
• allaire forums 3.1
Related
Referenced by CWE · observed example (1)
- CWE-472 External Control of Assumed-Immutable Web Parameter weakness
References
- http://online.securityfocus.com/archive/1/249026 Vendor Advisory
- http://www.iss.net/security_center/static/7841.php Vendor Advisory
- http://www.kb.cert.org/vuls/id/575619 US Government Resource
- http://www.securityfocus.com/bid/3827 www.securityfocus.com
- http://online.securityfocus.com/archive/1/249026 Vendor Advisory
- http://www.iss.net/security_center/static/7841.php Vendor Advisory
- http://www.kb.cert.org/vuls/id/575619 US Government Resource
- http://www.securityfocus.com/bid/3827 www.securityfocus.com