CVE Catalog

CVE-2000-0125

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
5.55%

92th percentile - higher than 92% of all known CVEs

Summary

wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, allowing remote attackers to gain privileges for wwwthreads forums.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access and manipulate data on the forums, potentially leading to serious security breaches.

Recommendation

It is recommended to update wwwthreads to the latest version and implement proper input cleansing mechanisms before using data in SQL queries.

Original NVD description (English source)

wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS