Security Advisory

CVE-2004-2733

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-10-09 10:00:00
Last updated 2024-08-08 01:36:25
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.