LIVE NEWSROOM · --:-- · May 25, 2026
A LIBRARY FOR SECURITY RESEARCHERS

CVE DATABASE  /  CVE-2002-0108

CVE-2002-0108

CVSS 7.5 · HIGH

Summary

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

CVSS 2.0 breakdown

Base score7.5 (HIGH)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Attack vectorNETWORK
Attack complexityLOW
ConfidentialityPARTIAL
IntegrityPARTIAL
AvailabilityPARTIAL

Affected products

Allaire forums
Check this CVE live

Use our free CVE Lookup tool for the latest NVD record, or browse the full CISA KEV catalog.

References

Data: NIST NVD. NVD last modified 2026-04-16. Always verify against the vendor advisory before acting.

Scroll to Top