CVE-2006-4796

CVE-2006-4796 is an XSS vulnerability in Snitz Forums 2000 3.4.06, exploitable via the sortorder parameter (strtopicsortord) in forum.asp. Remote attackers can inject arbitrary script or HTML. The provided documents do not include exploit code, specific root-cause details beyond the input paramet...

CVE-2006-4796

Cross-site scripting XSS vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter strtopicsortord variable...

Snitz Forums 2000 v3.4.06

ENGLISH Title : Snitz Forums 3.4.06 XSS Vulnerability Author : ajann HomePage : http://forum.snitz.com CODE http://target.com/path/forum.asp?FORUMID=1&ARCHIVE=true&sortfield=lastpost&sortorder="scriptfunction20xssbaslatalert"Xss20Here";/scriptbody20onload="xssbaslat" etc...

snitzXSS.txt

ENGLISH Title : Snitz Forums 3.4.06 XSS Vulnerability Author : ajann HomePage : http://forum.snitz.com CODE http://target.com/path/forum.asp?FORUMID=1&ARCHIVE=true&sortfield=lastpost&sortorder="function%20xssbaslatalert"Xss%20Here"; etc...

Snitz Forums 2000 - forum.asp Cross-Site Scripting

Snitz Forums 2000 - forum.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authenticatio...

Snitz Forums 2000 - 'forum.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authentication credentials and launch other attacks. Version...

Type confusion

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

CVE-2006-2530

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

CVE-2006-2530

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

CVE-2006-2530

CVE-2006-2530 affects Avatar MOD 1.3 for Snitz Forums 3.4 (and possibly other versions). The issue arises in avatar_upload.asp where remote attackers can bypass file type checks and upload arbitrary files by inserting a null byte in the file name. This constitutes an input validation bypass in th...

[Full-disclosure] CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload

======================================================================== = CodeScan Advisory, codescan.com [email protected] = http://www.codescan.com/Advisories/CodeScanLabsAvatarMod.html = = Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload = = Vendor Website: =...

Snitz Forums 2000 post.asp type Parameter XSS

The remote host is running Snitz Forums 2000, a web-based electronic forum written in ASP. The version of Snitz Forums 2000 installed on the remote host fails to sanitize the 'type' parameter before using it in the 'post.asp' script to generate dynamic content. By leveraging this flaw, an attacke...

Snitz Forums 2000 HTTP Response Splitting

The remote host is using Snitz Forums 2000 - an ASP based forum/bbs. There is a bug in this software which makes it vulnerable to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Snitz Forums 2000 SQL injection

The remote host is using Snitz Forum 2000 which allows an attacker to execute stored procedures and non-interactive operating system commands on the system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Snitz Forums 2000 SQL injection

The remote host is using Snitz Forum 2000 This version allow an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out maliciou...

[SA17385] Snitz Forums 2000 "post.asp" Cross-Site Scripting Vulnerability

TITLE: Snitz Forums 2000 "post.asp" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17385 VERIFY ADVISORY: http://secunia.com/advisories/17385/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Snitz Forums 2000 3.4.x http://secunia.com/product/1483/...

CVE-2005-3411

Cross-site scripting XSS vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method...

CVE-2005-3411

Cross-site scripting XSS vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method...

CVE-2005-3411

CVE-2005-3411 concerns a cross-site scripting (XSS) vulnerability in Snitz Forums 2000, specifically in the post.asp script used to render Topic content. The vulnerability arises from unsanitized handling of the Type parameter when generating dynamic content, enabling an attacker to inject arbitr...

CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter...