Vulnerabilities (CVE)

Filtered by vendor Snitz Communications Subscribe
Filtered by product Snitz Forums 2000
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1687 1 Snitz Communications 1 Snitz Forums 2000 2025-04-03 5.0 MEDIUM N/A
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
CVE-2002-0329 1 Snitz Communications 1 Snitz Forums 2000 2025-04-03 7.5 HIGH N/A
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
CVE-2006-2530 1 Snitz Communications 2 Avatar Mod, Snitz Forums 2000 2025-04-03 5.0 MEDIUM N/A
avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product.
CVE-2003-0492 1 Snitz Communications 1 Snitz Forums 2000 2025-04-03 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.
CVE-2002-0607 1 Snitz Communications 1 Snitz Forums 2000 2025-04-03 7.5 HIGH N/A
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.