Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Web Wiz Forum未授权私人版块访问漏洞
Vulnerability Description
Web Wiz Forum是英国Web Wiz公司的一套基于Web的免费论坛软件。 Web Wiz Forum不正确处理使用'quote'模式的畸形请求,远程攻击者可以利用这个漏洞未授权访问私人版块。 当使用"quote"模式时,Web Wiz Forum由于没有充分检查是否对论坛和消息的请求,可导致远程攻击者在本来不允许访问的私人版块中读取和张贴消息。
CVSS Information
N/A
Vulnerability Type
N/A