CVE-2000-0125
CVSS 2.0 Score 7.5 of 10 (high)
Details
Published Feb 3, 2000
Updated: Nov 20, 2024
Summary
CVE-2000-0125 is a vulnerability affecting the wwwthreads forum software. The issue lies in the software's failure to properly sanitize numeric data and table names used in SQL queries. This allows remote attackers to manipulate these queries, ultimately gaining elevated privileges within the forums. This vulnerability poses a significant risk to the security of wwwthreads installations, as unauthorized access can lead to data theft, modification, or even system takeover. It is crucial for users to apply the available patches or updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share