CVE-2000-0125 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 5.5% (pctl 93)
Patch early
A public exploit exists.
Description
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 5.55% — more likely to be exploited than 93% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2000-02-03 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| wired community software | wwwthreads |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Wired Community Software WWWThreads 5.0 - SQL Command Input | 2000-02-03 |
References
- http://www.securityfocus.com/bid/967
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net
- http://www.securityfocus.com/bid/967
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net
→ the Explorer · watch your stack · NVD