CVE-2003-1176 json
post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private foru…
published 2003-12-31 22 y ago modified 2026-06-16 4 mo ago also EUVD-2003-1166
- cvss
- 6.4
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.2%
- EPSS 7.2% chance of exploitation in 30 days, percentile 94%
- public exploits
- 1
- Exploit-DB
Summary
post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.
Patch / fix
Timeline
- First public exploit (EDB-23331)
- Published
Exploit prediction
7.17% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-23331 Web Wiz Forum 6.34/7.0/7.5 - Unauthorized Private Forum Access webapps, 2003-11-03
- securityfocus.com http://www.securityfocus.com/bid/8957 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/archive/1/343175 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:P/I:P/A:N |
References
-
securityfocus.com
/archive/1/343314
mailing-list, patch
-
securityfocus.com
/bid/8957
vdb-entry, exploit
-
securityfocus.com
/archive/1/343175
mailing-list, exploit
-
osvdb.org
/2768
vdb-entry
-
secunia.com
/advisories/10137
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/13581
vdb-entry
-
securitytracker.com
/id?1008100
vdb-entry
Sources
- CVE List CVE-2003-1176
- NVD CVE-2003-1176
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.