Vulnerabilities

TI-2008-03253 CVE-2008-3392 · GHSA-4fg8-f5cf-42h3

Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote…

LOW 27

Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00595 Published 2008-07-31 No fix listed CWE-352

TI-2008-03252 CVE-2008-3391 · GHSA-m28c-vf5g-3rv9

Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01524 Published 2008-07-31 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote…