VULNERABILITY INTELLIGENCE
CVE-2004-2733
CVSS score5.8 MEDIUM
EPSS probability1.46%
CISA KEVNot currently listed
Published2004-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P
Description
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.