CVE-2008-0134

Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

Link	Resource
http://hackerscenter.com/archive/view.asp?id=28145
http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt
http://secunia.com/advisories/28284	Vendor Advisory
http://www.securityfocus.com/bid/27162
http://www.securityfocus.com/archive/1/485836/100/200/threaded

Configuration 1

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*

---

Published : 2008-01-08 07:46

Updated : 2018-10-15 09:58

---

NVD link : CVE-2008-0134

Mitre link : CVE-2008-0134

No products.

CWE-79