Security Advisory
CVE-2004-2733
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.