Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2002-0108

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

Published

2002-03-25T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	allaire	forums	2.0.4	Yes
Application	allaire	forums	2.0.5	Yes
Application	allaire	forums	3.0	Yes
Application	allaire	forums	3.1	Yes

References

http://online.securityfocus.com/archive/1/249026 Vendor Advisory ([email protected])
http://www.iss.net/security_center/static/7841.php Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/575619 US Government Resource ([email protected])
http://www.securityfocus.com/bid/3827 ([email protected])
http://online.securityfocus.com/archive/1/249026 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.iss.net/security_center/static/7841.php Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/575619 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/3827 (af854a3a-2127-422b-91ae-364da2661108)