CVE
- Id
- 11159
- CVE No.
- CVE-2004-2733
- Status
- Candidate
- Description
- Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
- Phase
- Assigned (20071008)
- Votes
- None (candidate not yet proposed)
- Comments