Search vulnerabilities

Results 25

Export CSV
CVE-2005-3411

Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method.

CVSS 2.0 · 4.3 Medium EPSS 3.7% KEV · Not listed
CVE-2006-2530

avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
CVE-2010-4826

SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
CVE-2010-4827

Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed