CVE-2000-0125

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 3, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01265.0Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.CVE-2000-01277.5The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privilege CVE-2000-012810.0The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.CVE-2000-01292.1Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a L CVE-2000-01307.2Buffer overflow in SCO scohelp program allows remote attackers to execute commands.CVE-2000-01315.0Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.CVE-2000-01322.6Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.CVE-2000-013310.0Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, a CVE-2000-01347.5The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01357.5The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01367.5The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01377.5The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.