CVE-2008-0208

Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary web script or HTML via the target parameter.

Link	Resource
http://hackerscenter.com/archive/view.asp?id=28145	Exploit
http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt	Exploit
http://secunia.com/advisories/28284
http://www.securityfocus.com/bid/27162
http://www.securityfocus.com/archive/1/485836/100/200/threaded

Configuration 1

cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:* cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*

---

Published : 2008-01-10 12:46

Updated : 2018-10-15 09:58

---

NVD link : CVE-2008-0208

Mitre link : CVE-2008-0208

No products.

CWE-79