CVE-2002-0108: Allaire Forums

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

Affected products

• Allaire Forums: version 2.0.4 only; version 2.0.5 only; version 3.0 only; version 3.1 only

Published 2002-03-25. Last modified 2026-06-16.