forum.snitz.comConfirmation
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360 CVE-2004-2720
Snitz Forums 3.3.03 - Remote Command Execution
Record summary
CVE-2004-2720 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSnitz Forums 3.3.03 - Remote Command ExecutionExploitDB exploitby anonymousNot analyzed1 file
References
1011895Third-party advisory
http://secunia.com/advisories/11895 3200Third-party advisory
http://securityreason.com/securityalert/3200 1010524vdb entry
http://securitytracker.com/id?1010524 7190vdb entry
http://www.osvdb.org/7190 sec-tec.co.uk
http://www.sec-tec.co.uk/vulnerability/snitzxss.html 20040617 XSS in Snitz Forum 2000mailing list
http://www.securityfocus.com/archive/1/366309 10564vdb entry
http://www.securityfocus.com/bid/10564 snitz-input-validation-xss(16444)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16444 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2004-2720