Snitz Communications Snitz Forums 2000 3.4.05
Approved changes feed: RSS · Atom
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*
part: a version: 3.4.05 update: *
| Vendor | Snitz Communications (c55c5b67-cb80-5ff6-bcf0-1396a72b7b4d) |
|---|---|
| Product | Snitz Forums 2000 (4d538b06-44d5-59c0-ac73-9e2d6da18566) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-0209 |
vulnerable | 2026-06-08 04:50:10.476918 |
Details available
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.
Published: 2008-01-10T00:00:00.000Z
Updated: 2024-08-07T07:39:34.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0136 |
vulnerable | 2026-06-08 04:50:10.341327 |
Details available
Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.
Published: 2008-01-08T19:00:00.000Z
Updated: 2024-08-07T07:32:23.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0135 |
vulnerable | 2026-06-08 04:50:10.341018 |
Details available
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.
Published: 2008-01-08T19:00:00.000Z
Updated: 2024-08-07T07:32:23.912Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0134 |
vulnerable | 2026-06-08 04:50:10.340240 |
Details available
Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.
Published: 2008-01-08T19:00:00.000Z
Updated: 2024-08-07T07:32:24.104Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2959 |
vulnerable | 2026-06-08 04:49:07.963938 |
Details available
SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie.
Published: 2006-06-12T20:00:00.000Z
Updated: 2024-08-07T18:06:27.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2530 |
not_vulnerable | 2026-06-08 04:49:07.021888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3411 |
vulnerable | 2026-06-08 04:48:40.681192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.