CVE:CVE-2004-2733
CNNVD:CNNVD-200412-1102
Web Wiz Forums 7.7a使用无效逻辑判断用户权限，远程攻击者可以（1）借助pop_up_ip_blocking.asp中断任意IP地址，或者（2）借助pop_up_topic_admin.asp修改主题。
solution:Upgrade webwiz web_wiz_forums to a higher version than 7.7:a,and avoid the version 7.7:a