Description
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html
- http://marc.info/?l=bugtraq&m=105277599131134&w=2
- http://osvdb.org/56166
- http://packetstormsecurity.org/0305-exploits/snitz_exec.txtExploit
- http://secunia.com/advisories/35733Vendor Advisory
- http://www.securityfocus.com/bid/35764Exploit, Patch
- http://www.securityfocus.com/bid/7549Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11981
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html
- http://marc.info/?l=bugtraq&m=105277599131134&w=2
- http://osvdb.org/56166
- http://packetstormsecurity.org/0305-exploits/snitz_exec.txtExploit
- http://secunia.com/advisories/35733Vendor Advisory
- http://www.securityfocus.com/bid/35764Exploit, Patch
- http://www.securityfocus.com/bid/7549Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11981
Timeline
- Published
- Jun 16, 2003
- Last modified
- Jun 16, 2026
- NVD status
- Modified