CVE-2001-0972: Surf-Net Asp Forum

High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days.

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."

Affected products

• Surf-Net Asp Forum: up to and including 2.30; version 2.20 only

Published 2001-08-31. Last modified 2026-06-16.