CVE Catalog
CVE-2000-0125
HighExploitation Probability (EPSS)
Very high risk5.55%
92th percentile - higher than 92% of all known CVEs
Summary
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, allowing remote attackers to gain privileges for wwwthreads forums.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access and manipulate data on the forums, potentially leading to serious security breaches.
Recommendation
It is recommended to update wwwthreads to the latest version and implement proper input cleansing mechanisms before using data in SQL queries.
Original NVD description (English source)
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.

