NetSight
high7.5

CVE-2002-0108

Allaire Forums 2.0.4 and 2.0.5 and Forums!

Impact

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

Affected products

VendorProductAffected versions
AllaireForums
Versions 2.0.4, 2.0.5, 3.0, 3.1

References