17 matches found
EUVD-2006-2956
Malware in sbrugna...
Snitz Forum 1.0 SQL Injection
Exploit Title: Snitz Forum v1.0 - Blind SQL Injection Date: 13/03/2023 Exploit Author: Emiliano Febbi Vendor Homepage: https://forum.snitz.com/ Software Link: https://sourceforge.net/projects/sf2k/files/ Version: ALL VERSION Tested on: Windows 10 code . . / ///I . / // 0day PoC...
Snitz Forum v1.0 - Blind SQL Injection
Exploit Title: Snitz Forum v1.0 - Blind SQL Injection Date: 13/03/2023 Exploit Author: Emiliano Febbi Vendor Homepage: https://forum.snitz.com/ Software Link: https://sourceforge.net/projects/sf2k/files/ Version: ALL VERSION Tested on: Windows 10 code . . / ///I . / // 0day PoC...
Snitz Forum v1.0 - Blind SQL Injection Vulnerability
Exploit Title: Snitz Forum v1.0 - Blind SQL Injection Exploit Author: Emiliano Febbi Vendor Homepage: https://forum.snitz.com/ Software Link: https://sourceforge.net/projects/sf2k/files/ Version: ALL VERSION Tested on: Windows 10 code . . / ///I . / // 0day PoC...
Snitz Forum 2000 Post.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
Snitz Forum < 3.4.0.07 active.asp BuildTime Parameter SQL Injection
Binary data 4306.prm...
Snitz Forum < 3.4.0.08 SQL Injection
Binary data 5105.prm...
Sql injection
SQL injection vulnerability in incheader.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie...
CVE-2006-2959
SQL injection vulnerability in incheader.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie...
CVE-2006-2959
The provided connected documents confirm CVE-2006-2959 affects Snitz Forum 3.4.05 and earlier, via an SQL injection in inc_header.asp. The vulnerability is triggered through the %strCookieURL%.GROUP parameter in a cookie, enabling remote attackers to execute arbitrary SQL commands. The NVD entry ...
CVE-2006-2959
SQL injection vulnerability in incheader.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie...
[KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability
KAPDA::47 - Snitz Forum = 3.4.05 SQL-Injection Vulnerability KAPDA New advisory Advisory Number: 47 Vulnerable products : Snitz Forum = 3.4.05 Vendor: http://forum.snitz.com Vulnerability: SQLInjection Date : -------------------- Found : 2006/01/12 Vendor Contacted : 2006/06/03 Release Date :...
Snitz Forum 2000 - post.asp Cross-Site Scripting
Snitz Forum 2000 - post.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...
Snitz Forum 2000 - 'post.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...
Snitz Forum < 3.4.0.06 XSS
Binary data 3271.prm...
Snitz Forum < 3.4.05 HTTP Response Splitting
Binary data 2302.prm...
Snitz Forums 2000 < 3.4.03 register.asp Email Parameter SQL Injection
The remote host is using Snitz Forum 2000. This version allows an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out...