Vulnerabilities

TI-2003-01470 CVE-2003-1571 · GHSA-5579-vjr8-c2mq

Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient…

LOW 28

Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dat…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02615 Published 2009-04-02 No fix listed CWE-264

TI-2008-03253 CVE-2008-3392 · GHSA-4fg8-f5cf-42h3

Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote…

LOW 27

Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00595 Published 2008-07-31 No fix listed CWE-352

TI-2008-03252 CVE-2008-3391 · GHSA-m28c-vf5g-3rv9

Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01524 Published 2008-07-31 No fix listed CWE-79

TI-2008-03228 CVE-2008-3367 · GHSA-gcc4-656c-73xw

Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text…

LOW 23

Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01272 Published 2008-07-30 No fix listed CWE-79

TI-2007-01490 CVE-2007-1548 · GHSA-pq5v-fxj9-pfm8

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before…

LOW 37

SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrar…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01846 Published 2007-03-20 No fix listed CWE-89