CVE-2008-0232

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

Sql injection

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

CVE-2008-0232

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

Open redirect

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

CVE-2008-0208

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

CVE-2008-0208

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

CVE-2008-0208

The CVE-2008-0208 issue affects Snitz Forums 2000, specifically login.asp in versions 3.4.05 and earlier. The vulnerability is a reflected Cross‑site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the target parameter. The connected documents confirm ...

CVE-2008-0209

CVE-2008-0209 : An open redirect vulnerability in the Forums/login.asp page of Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary external sites by supplying a malicious value in the target parameter. The provided connected documents do not specify the exa...

CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitzforums2000.mdb...

Improper access control

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitzforums2000.mdb...

Path traversal

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path...

CVE-2008-0136

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path...

CVE-2008-0134

Cross-site scripting XSS vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter...

CVE-2008-0134

Cross-site scripting XSS vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter...

CVE-2008-0136

CVE-2008-0136 affects Snitz Forums 2000 3.4.05. The vulnerability allows remote attackers to disclose sensitive information by requesting forum/whereami.asp, revealing the database path. The issue is a direct information disclosure via a crafted HTTP request, enabling partial confidentiality impa...

CVE-2008-0135

CVE-2008-0135 affects Snitz Forums 2000 up to version 3.4.06, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the forum/snitz_forums_2000.mdb directly via HTTP, exposing the database. The impact described is exposure of ...