CVE-2008-0232

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

Sql injection

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

CVE-2008-0232

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

Open redirect

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

CVE-2008-0208

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

CVE-2008-0208

Cross-site scripting XSS vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter...

CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter...

CVE-2008-0209

CVE-2008-0209 : An open redirect vulnerability in the Forums/login.asp page of Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary external sites by supplying a malicious value in the target parameter. The provided connected documents do not specify the exa...

CVE-2008-0208

The CVE-2008-0208 issue affects Snitz Forums 2000, specifically login.asp in versions 3.4.05 and earlier. The vulnerability is a reflected Cross‑site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the target parameter. The connected documents confirm ...

Improper access control

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitzforums2000.mdb...

Path traversal

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path...

CVE-2008-0136

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path...

Cross site scripting

Cross-site scripting XSS vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter...

CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitzforums2000.mdb...

CVE-2008-0134

Cross-site scripting XSS vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter...

CVE-2008-0136

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path...

CVE-2008-0135

CVE-2008-0135 affects Snitz Forums 2000 up to version 3.4.06, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the forum/snitz_forums_2000.mdb directly via HTTP, exposing the database. The impact described is exposure of ...

CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitzforums2000.mdb...