PT-2002-1194 · Foru Cms+1 · Foru Cms+1

Publicado 2002-03-15 · Atualizado 2008-11-04 · CVE-2002-0108

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Allaire Forums versions 2.0.4 through 2.0.5 Forums! versions 3.0 through 3.1

Description The issue allows remote authenticated users to spoof messages as other users. This is achieved by modifying the hidden form fields for the name and e-mail address.

Recommendations For Allaire Forums versions 2.0.4 through 2.0.5, consider restricting access to the form fields until a fix is available. For Forums! versions 3.0 through 3.1, avoid using the hidden form fields for user identification until the issue is resolved.

Correção

Identificadores relacionados

CVE-2002-0108

Produtos afetados

Allaire Forums

Foru Cms

Referências · 5

• http://securityfocus.com/bid/3827 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0108 · Nota de Segurança
• http://iss.net/security_center/static/7841.php · Aviso do Fabricante
• http://kb.cert.org/vuls/id/575619 · Nota
• http://online.securityfocus.com/archive/1/249026 · Aviso do Fabricante