Web Wiz Forums Information Disclosure Vulnerability
BID:14207
Info
Web Wiz Forums Information Disclosure Vulnerability
| Bugtraq ID: | 14207 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 11 2005 12:00AM |
| Updated: | Jul 11 2005 12:00AM |
| Credit: | [email protected] is credited with the discovery of this vulnerability. |
| Vulnerable: |
Webwiz Web Wiz Forums 8.0 alpha Webwiz Web Wiz Forums 7.91 Webwiz Web Wiz Forums 7.9 |
| Not Vulnerable: | |
Discussion
Web Wiz Forums Information Disclosure Vulnerability
Web Wiz Forums is affected by an information disclosure vulnerability. This issue is due to a failure in the application to properly verify user credentials before displaying message titles. An attacker can retrieve the titles of messages in hidden forums.
This issue is reported to affect Web Wiz Forums version 8.0alpha and 7.9; earlier versions may also be vulnerable.
Web Wiz Forums is affected by an information disclosure vulnerability. This issue is due to a failure in the application to properly verify user credentials before displaying message titles. An attacker can retrieve the titles of messages in hidden forums.
This issue is reported to affect Web Wiz Forums version 8.0alpha and 7.9; earlier versions may also be vulnerable.
Exploit / POC
Web Wiz Forums Information Disclosure Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Web Wiz Forums Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.