CVEvulnerability
CVE-2003-1162
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, forum_id, and sid parameters.
Affected configurations
• tritanium scripts tritanium bulletin board 0.993 beta
• tritanium scripts tritanium bulletin board 0.994 beta
• tritanium scripts tritanium bulletin board 0.999 beta
• tritanium scripts tritanium bulletin board 1.0 beta
• tritanium scripts tritanium bulletin board 1.1 final
• tritanium scripts tritanium bulletin board 1.2
• tritanium scripts tritanium bulletin board 1.2.1
• tritanium scripts tritanium bulletin board 1.2.2
• tritanium scripts tritanium bulletin board 1.2.3
References
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0348.html Exploit
- http://secunia.com/advisories/10135 Exploit
- http://www.osvdb.org/2770 www.osvdb.org
- http://www.securityfocus.com/bid/8944 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13587 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2003-10/0348.html Exploit
- http://secunia.com/advisories/10135 Exploit
- http://www.osvdb.org/2770 www.osvdb.org
- http://www.securityfocus.com/bid/8944 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13587 exchange.xforce.ibmcloud.com