Lucene search

[email protected]CVE-2002-0329

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0329

2003-04-0205:00:00

[email protected]

web.nvd.nist.gov

cve-2002-0329

information security

cross-site scripting

snitz forums 2000

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.115 Low

EPSS

Percentile

95.3%

JSON

Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.

Affected configurations

NVD

Node

snitz_communicationssnitz_forums_2000Match3.0

snitz_communicationssnitz_forums_2000Match3.1sr4

snitz_communicationssnitz_forums_2000Match3.2.03

snitz_communicationssnitz_forums_2000Match3.3

snitz_communicationssnitz_forums_2000Match3.3.01

snitz_communicationssnitz_forums_2000Match3.3.02

CPENameOperatorVersion
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.0
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.1
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.2.03
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3.01
snitz_communications:snitz_forums_2000snitz communications snitz forums 2000eq3.3.02

CPE	Name	Operator	Version
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.0
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.1
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.2.03
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3.01
snitz_communications:snitz_forums_2000	snitz communications snitz forums 2000	eq	3.3.02

References

forum.snitz.com/forum/link.asp?TOPIC_ID=23660

marc.info/?l=bugtraq&m=101485184605149&w=2

online.securityfocus.com/archive/1/258981

www.iss.net/security_center/static/8309.php

www.kb.cert.org/vuls/id/132011

www.securityfocus.com/bid/4192

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

High

0.115 Low

EPSS

Percentile

95.3%

JSON

Related for CVE-2002-0329

cert1 cvelist1 nvd1