high7.5Public exploit code
CVE-2002-0329
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via J…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Snitz Forums 2000 3.0/3.1/3.3 - Image Tag Cross-Agent Scripting2002-02-27 · webapps · asp · Verified
Impact
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snitz Communications | Snitz Forums 2000 | Versions 3.0, 3.1, 3.2.03, 3.3, 3.3.01, 3.3.02 |
References
- NVD record
- CVE.org record
- http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660
- http://marc.info/?l=bugtraq&m=101485184605149&w=2
- http://online.securityfocus.com/archive/1/258981
- http://www.iss.net/security_center/static/8309.php
- http://www.kb.cert.org/vuls/id/132011
- http://www.securityfocus.com/bid/4192
- http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660
- http://marc.info/?l=bugtraq&m=101485184605149&w=2
- http://online.securityfocus.com/archive/1/258981
- http://www.iss.net/security_center/static/8309.php
- http://www.kb.cert.org/vuls/id/132011
- http://www.securityfocus.com/bid/4192