CVE-2002-0108

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/249026Vendor Advisory
http://www.iss.net/security_center/static/7841.phpVendor Advisory
http://www.kb.cert.org/vuls/id/575619US Government Resource
http://www.securityfocus.com/bid/3827
http://online.securityfocus.com/archive/1/249026Vendor Advisory
http://www.iss.net/security_center/static/7841.phpVendor Advisory
http://www.kb.cert.org/vuls/id/575619US Government Resource
http://www.securityfocus.com/bid/3827

Timeline

Published: Mar 25, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-01096.4Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information CVE-2002-01102.1Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file,CVE-2002-01117.5Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary com CVE-2002-01125.0Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.CVE-2002-01134.6EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which all CVE-2002-01144.6EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain CVE-2002-01155.0Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and cor CVE-2002-01165.0Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of serv CVE-2002-01177.5Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary CVE-2002-01187.5Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitr CVE-2002-01195.0Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, s CVE-2002-01202.1Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local