VYPR
← All vendors
Vendor

Webwiz

Products
9
CVEs
18
Across products
25
Status
Private

Products

9

Recent CVEs

18
  • CVE-2003-1176Dec 31, 2003
    Bdc Enterprises
    Web Wiz Forums
    risk 0.04cvss —epss 0.07

    post_message_form.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID (forum ID) parameter.

  • CVE-2009-5019Dec 1, 2010
    Webwiz
    Newspad
    risk 0.03cvss —epss 0.03

    Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.

  • CVE-2003-1571Apr 2, 2009
    Webwiz
    Guestbook
    risk 0.03cvss —epss 0.03

    Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that…

  • CVE-2008-3391Jul 31, 2008
    Webwiz
    Forum
    risk 0.03cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to (1) admin_group_details.asp and (2) admin_category_details.asp.

  • CVE-2008-0479Jan 29, 2008
    Webwiz
    Newspad
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter.

  • CVE-2008-0481Jan 29, 2008
    Webwiz
    Rich Text Editor
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter in a save action.

  • CVE-2008-0480Jan 29, 2008
    Webwiz
    Forums
    risk 0.03cvss —epss 0.04

    Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\\ in the sub parameter to (1) RTE_file_browser.asp or (2) file_browser.asp.

  • CVE-2008-0473Jan 29, 2008
    Webwiz
    Rich Text Editor
    risk 0.03cvss —epss 0.03

    RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vectors.

  • CVE-2008-0466Jan 29, 2008
    Webwiz
    Rich Text Editor
    risk 0.03cvss —epss 0.05

    Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the…

  • CVE-2007-1548Mar 20, 2007
    Web Wiz Forums
    Web Wiz Forums
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote)…

  • CVE-2006-6212Dec 1, 2006
    Webwiz
    Site News
    risk 0.03cvss —epss 0.02

    PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: The provenance of this information is unknown; the details are obtained solely…

  • CVE-2006-0175Jan 11, 2006
    Webwiz
    Forums
    risk 0.03cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

  • CVE-2019-25442Feb 22, 2026
    Zingiri
    Forums
    risk 0.00cvss —epss 0.00

    Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to member_profile.asp with malicious PF values to extract sensitive…

  • CVE-2008-3392Jul 31, 2008
    Webwiz
    Forum
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to log_off_user.asp.

  • CVE-2008-3367Jul 30, 2008
    Webwiz
    Rich Text Editor
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

  • CVE-2007-3202Jun 12, 2007
    Webwiz
    Rich Text Editor
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document.

  • CVE-2005-4606Dec 31, 2005
    Webwiz
    Database Login
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in check_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2) Journal 1.0 and earlier, (3) Polls 3.06 and earlier, and (4) and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • CVE-2004-2733Dec 31, 2004
    Webwiz
    Forums
    risk 0.00cvss —epss 0.01

    Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.