231 matches found
Snitz Forums 2000 - Multiple Cross-Site Scripting Vulnerabilities
Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT XSS If sound tag is allowed: soundhttp://urltovalidmp3orm3ufile.m3u...
Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting
Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data...
Snitz Forums 2000 Detection
Snitz Forums 2000, a free discussion forum application written in ASP, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40469; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...
Snitz Forums 2000 <= 3.4.07 register.asp 'Email' Parameter SQL Injection
The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The domain name of the email address passed to the 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. Note th...
Snitz Forums 2000 'register.asp' SQL注入漏洞
Bugraq ID: 35764 Snitz Forums 2000是一款基于ASP的论坛程序。 Snitz Forums 2000不正确处理用户输入，远程攻击者可以利用漏洞获得敏感信息或对数据库进行操作。 register.asp脚本对"Email"参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或对数据库进行操作。 Snitz Forums 2000 Snitz Forums 2000 3.4.7 目前没有解决方案提供： http://forum.snitz.com/...
Snitz Forums 2000 'register.asp' SQL Injection Vulnerability
Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
Snitz Forums 2000 Detection
This host is running Snitz Forums 2000, a freeware interactive discussion environment. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Snitz Forums 2000 Detection
This host is running Snitz Forums 2000, an freeware interactive discussion environment. OpenVAS Vulnerability Test $Id: snitzforums2000detect.nasl 5744 2017-03-28 07:25:23Z cfi $ Snitz Forums 2000 Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is...
Snitz Forums 2000 'register.asp' SQL Injection Vulnerability
Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Cross site scripting
Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...
CVE-2008-0209
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...
CVE-2008-0208
Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...
Open redirect
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...
CVE-2008-0208: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...
CVE-2008-0208
Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...
CVE-2008-0209: Improper Input Validation
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...
CVE-2008-0209
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...
CVE-2008-0208
The CVE-2008-0208 issue affects Snitz Forums 2000, specifically login.asp in versions 3.4.05 and earlier. The vulnerability is a reflected Cross‑site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the target parameter. The connected documents confirm ...
CVE-2008-0209
CVE-2008-0209 : An open redirect vulnerability in the Forums/login.asp page of Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary external sites by supplying a malicious value in the target parameter. The provided connected documents do not specify the exa...