Snitz Communications Snitz Forums 2000 — known CVE vulnerabilities

Every CVE whose affected-product data names Snitz Communications Snitz Forums 2000, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (24)

• CVE-2003-0493 — CVSS 10.0 (critical): Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after…
• CVE-2003-0494 — CVSS 10.0 (critical): password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a…
• CVE-2006-5603 — CVSS 9.8 (critical): SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2012-5313 — CVSS 7.5 (high): SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via the TOPIC_ID…
• CVE-2002-0607 — CVSS 7.5 (high): members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on…
• CVE-2003-0286 — CVSS 7.5 (high): SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to…
• CVE-2006-2959 — CVSS 7.5 (high): SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands…
• CVE-2007-1023 — CVSS 7.5 (high): SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2007-6240 — CVSS 7.5 (high): SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2010-4826 — CVSS 7.5 (high): SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the…
• CVE-2002-0329 — CVSS 7.5 (high): Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other…
• CVE-2003-0492 — CVSS 6.8 (medium): Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web…
• CVE-2008-0209 — CVSS 5.8 (medium): Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to…
• CVE-2008-0136 — CVSS 5.0 (medium): Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals…
• CVE-2008-0135 — CVSS 5.0 (medium): Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote…
• CVE-2004-1687 — CVSS 5.0 (medium): CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to…
• CVE-2009-4554 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary web script or…
• CVE-2007-1374 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in pop_profile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web…
• CVE-2008-0208 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary…
• CVE-2006-4796 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or…
• CVE-2004-2720 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject…
• CVE-2005-3411 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or…
• CVE-2010-4827 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script…
• CVE-2008-0134 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject…