Description
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660Exploit, Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=101485184605149&w=2
- http://online.securityfocus.com/archive/1/258981
- http://www.iss.net/security_center/static/8309.phpExploit, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/132011US Government Resource
- http://www.securityfocus.com/bid/4192
- http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660Exploit, Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=101485184605149&w=2
- http://online.securityfocus.com/archive/1/258981
- http://www.iss.net/security_center/static/8309.phpExploit, Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/132011US Government Resource
- http://www.securityfocus.com/bid/4192
Timeline
- Published
- Jun 25, 2002
- Last modified
- Jun 16, 2026
- NVD status
- Modified