CVE-2003-0286

Snitz Forums 2000 is vulnerable to an SQL injection in register.asp: the Email parameter is not sanitized, allowing remote attackers to execute stored procedures and potentially OS commands via SQL, including stored procedures like xp_cmdshell. Affected versions include before 3.4.03 and possibly...

CVE-2009-4554

CVE-2009-4554 refers to multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 version 3.4.07. The weaknesses allow remote attackers to inject arbitrary JavaScript/HTML via: (1) the url parameter to pop_send_to_friend.asp (related to a crafted onload attribute of an IMG element)...

CVE-2006-4796

CVE-2006-4796 is an XSS vulnerability in Snitz Forums 2000 3.4.06, exploitable via the sortorder parameter (strtopicsortord) in forum.asp. Remote attackers can inject arbitrary script or HTML. The provided documents do not include exploit code, specific root-cause details beyond the input paramet...

CVE-2010-4826

Snitz Forums 2000 (version 3.4.07) is affected by a SQL injection in members.asp exploitable through the M_NAME parameter, allowing remote execution of arbitrary SQL commands. Root cause is improper handling of user input in the M_NAME field. The connected OpenVAS entry confirms the SQL injection...

CVE-2005-3411

CVE-2005-3411 concerns a cross-site scripting (XSS) vulnerability in Snitz Forums 2000, specifically in the post.asp script used to render Topic content. The vulnerability arises from unsanitized handling of the Type parameter when generating dynamic content, enabling an attacker to inject arbitr...

CVE-2006-5603

CVE-2006-5603 relates to a SQL injection in Snitz Forums 2000, specifically in the pop_mail.asp file where the RC parameter is used. The connected PT-2006-6311 entry confirms Snitz Forums 2000 version 3.4.06 as affected and identifies the vulnerability as an SQL injection that enables remote arbi...

CVE-2007-1023

The CVE-2007-1023 entry concerns Snitz Forums 2000, version 3.1 SR4, where pop_profile.asp is vulnerable to SQL injection via the id parameter. This allows remote attackers to execute arbitrary SQL commands. The provided documents do not include explicit remediation steps or patched versions. No ...

CVE-2007-6240

CVE-2007-6240 concerns a SQL injection in Snitz Forums 2000 (build 3.4.06) via the BuildTime parameter in active.asp, allowing remote attackers to execute arbitrary SQL commands. Affected software: Snitz Forums 2000 3.4.06. Root cause: unparameterized SQL handling in the active.asp path. Impact: ...

CVE-2008-0208

The CVE-2008-0208 issue affects Snitz Forums 2000, specifically login.asp in versions 3.4.05 and earlier. The vulnerability is a reflected Cross‑site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the target parameter. The connected documents confirm ...

CVE-2003-0493

Snitz Forums 3.4.03 and earlier are affected by an authentication vulnerability where an attacker can gain privileges as another user by stealing and replaying the encrypted password after obtaining a valid session ID. The available sources (NVD entry for CVE-2003-0493 and related records) descri...

CVE-2003-0494

CVE-2003-0494 affects Snitz Forums 3.4.03 and earlier. The vulnerability is in password.asp: a remote attacker can reset passwords and gain privileges as other users by sending a direct request with a modified member id. Root cause appears to be parameter tampering on the member identifier, enabl...

CVE-2002-0329

Affected product: Snitz Forums 2000 (versions 3.3.03 and earlier). Vulnerability: cross-site scripting via crafted IMG tag SRC attribute, allowing remote attackers to execute arbitrary script as other Forum 2000 users. Root cause / details: the IMG SRC URL check is inadequate and can serve inject...

CVE-2008-0209

CVE-2008-0209 : An open redirect vulnerability in the Forums/login.asp page of Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary external sites by supplying a malicious value in the target parameter. The provided connected documents do not specify the exa...

CVE-2012-5313

CVE-2012-5313 describes an SQL injection in the Snitz Forums 2000 product, specifically in forum.asp via the TOPIC_ID parameter. This allows remote attackers to manipulate SQL commands, potentially exposing or altering data. The vulnerability is tied to the Web application’s handling of TOPIC_ID ...

CVE-2008-0136

CVE-2008-0136 affects Snitz Forums 2000 3.4.05. The vulnerability allows remote attackers to disclose sensitive information by requesting forum/whereami.asp, revealing the database path. The issue is a direct information disclosure via a crafted HTTP request, enabling partial confidentiality impa...

CVE-2008-0134

CVE-2008-0134 is a cross-site scripting (XSS) vulnerability in the Forums/setup.asp component of Snitz Forums 2000, version 3.4.06 and earlier. The issue is triggered via the MAIL parameter, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry documents a base score of ...

CVE-2002-0607

Snitz Forums 2000, version 3.3.03 and earlier, is affected in members.asp by a SQL injection on parameters (M_NAME, UserName, FirstName, LastName, INITIAL) that enables remote attackers to execute arbitrary code. Root cause is improper input handling in the affected page, allowing injected SQL to...

CVE-2003-0492

The CVE-2003-0492 entry concerns Snitz Forums (3.4.03 and earlier) with a Cross-site Scripting (XSS) vulnerability in search.asp. The issue allows remote attackers to execute arbitrary web script by supplying a crafted value to the Search parameter. Multiple connected sources corroborate an XSS s...

CVE-2004-1687

Snitz Forums 2000 v3.4.04 has a CRLF injection vulnerability in down.asp that enables HTTP Response Splitting via the location parameter. This remote issue can alter the server's HTML output. OpenVAS data labels it as Snitz Forums 2000 HTTP Response Splitting . No explicit remediation/patch detai...

CVE-2010-4827

The CVE-2010-4827 entry affects Snitz Forums 2000, version 3.4.07. It describes a Cross-site Scripting (XSS) vulnerability in the members.asp page, exploitable via the M_NAME parameter. The issue enables remote attackers to inject arbitrary web script or HTML. The NVD entry notes reliance on thir...

CVE-2007-1374

This entry documents a Cross-site scripting (XSS) vulnerability in Snitz Forums 2000, version 3.4.06, specifically in the pop_profile.asp component where an attacker can inject arbitrary script or HTML via the MSN parameter. The vulnerability is described consistently across CVE and NVD sources, ...

CVE-2004-2720

The vulnerability CVE-2004-2720 affects Snitz Forums 2000 (versions 3.4.04 and earlier) where a cross-site scripting (XSS) flaw exists in register.asp. The root cause is unvalidated input in the Email parameter, allowing an attacker to inject arbitrary web script or HTML via javascript events. Th...

CVE-2008-0135

CVE-2008-0135 affects Snitz Forums 2000 up to version 3.4.06, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the forum/snitz_forums_2000.mdb directly via HTTP, exposing the database. The impact described is exposure of ...

CVE-2006-2959

The provided connected documents confirm CVE-2006-2959 affects Snitz Forum 3.4.05 and earlier, via an SQL injection in inc_header.asp. The vulnerability is triggered through the %strCookieURL%.GROUP parameter in a cookie, enabling remote attackers to execute arbitrary SQL commands. The NVD entry ...