medium4.3Public exploit code
CVE-2005-3411
Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Snitz Forum 2000 - 'post.asp' Cross-Site Scripting2005-10-31 · webapps · asp · Verified
Impact
Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snitz Communications | Snitz Forums 2000 | Version 3.4.05 |
References
- NVD record
- CVE.org record
- http://forum.snitz.com/forum/topic.asp?TOPIC_ID=60011
- http://secunia.com/advisories/17385
- http://www.osvdb.org/20421
- http://www.securityfocus.com/bid/15241
- http://www.vupen.com/english/advisories/2005/2261
- http://forum.snitz.com/forum/topic.asp?TOPIC_ID=60011
- http://secunia.com/advisories/17385
- http://www.osvdb.org/20421
- http://www.securityfocus.com/bid/15241
- http://www.vupen.com/english/advisories/2005/2261