Web Wiz Forum Multiple Vulnerabilities
BID:10255
Info
Web Wiz Forum Multiple Vulnerabilities
| Bugtraq ID: | 10255 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 30 2004 12:00AM |
| Updated: | Apr 30 2004 12:00AM |
| Credit: | Disclosure of this issue is credited to "Alexander" <[email protected]>. |
| Vulnerable: |
Web Wiz Forums Web Wiz Forums 7.51 Web Wiz Forums Web Wiz Forums 7.7 b Web Wiz Forums Web Wiz Forums 7.7 a Web Wiz Forums Web Wiz Forums 7.5 Web Wiz Forums Web Wiz Forums 7.0 beta1 Web Wiz Forums Web Wiz Forums 7.0 1 Web Wiz Forums Web Wiz Forums 7.0 |
| Not Vulnerable: | |
Discussion
Web Wiz Forum Multiple Vulnerabilities
It has been reported that Web Wiz Forum is affected by multiple vulnerabilities. These issues are due to failure to properly sanitize user-supplied input facilitating SQL injection attacks, and design errors that allow unauthorized access to certain web forum functionality.
As a result of the SQL injection issue an attacker could modify the logic and structure of database queries. Other attacks may also be possible, such as gaining access to sensitive information.
A design error allows any user to access the topic modification and IP address blocking scripts, permitting unauthorized users to change forum topics and block arbitrary IP addresses.
It has been reported that Web Wiz Forum is affected by multiple vulnerabilities. These issues are due to failure to properly sanitize user-supplied input facilitating SQL injection attacks, and design errors that allow unauthorized access to certain web forum functionality.
As a result of the SQL injection issue an attacker could modify the logic and structure of database queries. Other attacks may also be possible, such as gaining access to sensitive information.
A design error allows any user to access the topic modification and IP address blocking scripts, permitting unauthorized users to change forum topics and block arbitrary IP addresses.
Exploit / POC
Web Wiz Forum Multiple Vulnerabilities
Exploits are not required to leverage these issues.
Exploits are not required to leverage these issues.
Solution / Fix
Web Wiz Forum Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Web Wiz Forum Multiple Vulnerabilities
References:
References:
- Forums Homepage (Web Wiz Guide)
- Web Wiz Forums Homepage (Web Wiz)