Snitz Forums 2000 Security Vulnerabilities and Issues — Snitz Forums 2000 CVE List

Lucene search

Snitz CommunicationsSnitz Forums 2000

5 matches found

CVE•added 2008/01/10 12:46 a.m.•42 views

CVE-2008-0208

Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.

4.3CVSS5.7AI score0.0034EPSS

CVE•added 2008/01/08 7:46 p.m.•36 views

CVE-2008-0134

Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

4.3CVSS5.7AI score0.00329EPSS

CVE•added 2008/01/08 7:46 p.m.•36 views

CVE-2008-0136

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.

5CVSS6.2AI score0.00319EPSS

CVE•added 2008/01/10 12:46 a.m.•36 views

CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.

5.8CVSS6.7AI score0.00253EPSS

CVE•added 2008/01/08 7:46 p.m.•30 views

CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.

5CVSS6.4AI score0.03456EPSS