Snitz Forums 2000@3.4.04 Security Vulnerabilities and Issues — Snitz Forums 2000@3.4.04 CVE List

Lucene search

Snitz CommunicationsSnitz Forums 20003.4.04

6 matches found

CVE•added 2008/01/10 12:46 a.m.•42 views

CVE-2008-0208

Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.

4.3CVSS5.7AI score0.0034EPSS

CVE•added 2008/01/08 7:46 p.m.•36 views

CVE-2008-0134

Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

4.3CVSS5.7AI score0.00329EPSS

CVE•added 2008/01/10 12:46 a.m.•36 views

CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.

5.8CVSS6.7AI score0.00253EPSS

CVE•added 2005/02/20 5:0 a.m.•30 views

CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.

5CVSS6.8AI score0.05863EPSS

CVE•added 2008/01/08 7:46 p.m.•30 views

CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.

5CVSS6.4AI score0.03456EPSS

CVE•added 2006/06/12 8:6 p.m.•28 views

CVE-2006-2959

SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie.

7.5CVSS8.4AI score0.00963EPSS