post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| bdc_enterprises | web_wiz_forums | 7.01 |
| bdc_enterprises | web_wiz_forums | 7.5 |
| bdc_enterprises | web_wiz_forums | 6.34 |
Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| bdc_enterprises | web_wiz_forums | 7.91 |
| bdc_enterprises | web_wiz_forums | 8.0_alpha |
| bdc_enterprises | web_wiz_forums | 7.9 |