Webwiz

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Webwiz records in CISA KEV

No Webwiz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web Wiz Forums 4 records HIGH Site News 2 records LOW Web Wiz Newspad 2 records LOW Database Login 1 record LOW Journal 1 record LOW Web Wiz Rich Text Editor 1 record LOW Weekly Poll 1 record LOW

Records

4 records in Web Wiz Forums · all components

TI-2019-15495 CVE-2019-25442 · GHSA-9pg8-c68j-285r

Web Wiz Forums 12.01 SQL Injection via PF Parameter

HIGH 77

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00433 Published 2026-02-22 No fix listed CWE-89

TI-2008-00441 CVE-2008-0466 · GHSA-qxjq-q2r2-ccg4

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums…

LOW 31

Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04927 Published 2008-01-28 No fix listed CWE-287

TI-2004-02603 CVE-2004-2733 · GHSA-fp5p-25cc-hp7j

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote…

LOW 29

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01457 Published 2007-10-09 No fix listed CWE-264

TI-2006-00167 CVE-2006-0175 · GHSA-234w-cjw4-wvgp

Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows…

LOW 26

Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03401 Published 2006-01-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0