CVE-2003-1176 describes an access control vulnerability in Web Wiz Forums versions 6.34 through 7.5. This flaw allows unauthenticated remote attackers to read or write to private forums by manipulating the forum ID (FID) parameter when using quote mode. With a CVSS score of 6.4, this vulnerability is moderately severe, enabling unauthorized information disclosure and modification with low attack complexity. While not in the KEV catalog, exploit code is publicly available via ExploitDB, and it has garnered significant community discussion, indicating awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.34CPE matchmatch criteria | cpe:2.3:a:bdc_enterprises:web_wiz_forums:6.34:*:*:*:*:*:*:* | ||
7.01CPE matchmatch criteria | cpe:2.3:a:bdc_enterprises:web_wiz_forums:7.01:*:*:*:*:*:*:* | ||
7.5CPE matchmatch criteria | cpe:2.3:a:bdc_enterprises:web_wiz_forums:7.5:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.