Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Snitz Forums 2000 HIGH 7.5
CVE-2012-5313

SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via the TOPIC_ID parameter.

No fix yet
Fix from $1,950 2012-10-08
Snitz Forums 2000 HIGH 7.5
CVE-2010-4826

SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME param…

Patch available
Fix from $1,950 2011-08-24
Snitz Forums 2000 MEDIUM 5.8
CVE-2008-0209

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web si…

Fix: after 3.4.06
Fix from $1,600 2008-01-10
Snitz Forums 2000 MEDIUM 5.0
CVE-2008-0135

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers …

Fix: after 3.4.06
Fix from $1,600 2008-01-08
Snitz Forums 2000 MEDIUM 5.0
CVE-2008-0136

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the databa…

Mitigation only
Fix from $1,600 2008-01-08
Snitz Forums 2000 HIGH 7.5
CVE-2007-6240

SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the BuildTime par…

No fix yet
Fix from $1,950 2007-12-05
Snitz Forums 2000 HIGH 7.5
CVE-2007-1023

SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via the id para…

No fix yet
Fix from $1,950 2007-02-21
Snitz Forums 2000 CRITICAL 9.8
CVE-2006-5603

SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC paramete…

No fix yet
Fix from $2,300 2006-10-30
Snitz Forums 2000 HIGH 7.5
CVE-2006-2959

SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %st…

No fix yet
Fix from $1,950 2006-06-12
Avatar Mod MEDIUM 5.0
CVE-2006-2530

avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload …

Patch available
Fix from $1,600 2006-05-22
Snitz Forums 2000 MEDIUM 5.0
CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify ex…

Patch available
Fix from $1,600 2004-09-16
Snitz Forums 2000 HIGH 10.0
CVE-2003-0493

Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a…

Mitigation only
Fix from $1,950 2003-08-07
Snitz Forums 2000 HIGH 10.0
CVE-2003-0494

password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request…

Mitigation only
Fix from $1,950 2003-08-07
Snitz Forums 2000 MEDIUM 6.8
CVE-2003-0492

Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script vi…

No fix yet
Fix from $1,600 2003-08-07
Snitz Forums 2000 HIGH 7.5
CVE-2003-0286

SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute a…

Fix: after 3.3.03
Fix from $1,950 2003-06-16
Snitz Forums 2000 HIGH 7.5
CVE-2002-0329

Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 u…

Patch available
Fix from $1,950 2002-06-25
Snitz Forums 2000 HIGH 7.5
CVE-2002-0607

members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the param…

Patch available
Fix from $1,950 2002-06-18