CVE-2000-0297

Medium

Published: 03/04/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.55%

83th percentile - higher than 83% of all known CVEs

Summary

Allaire Forums version 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.

Risk Assessment

Attackers may gain access to confidential information in secure conferences, potentially leading to privacy breaches and data security issues.

Recommendation

It is recommended to update Allaire Forums to the latest version to mitigate this vulnerability and review access settings for conferences.

Original NVD description (English source)

Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.