Snitz Communications Snitz Forums 2000 3.4.07
Approved changes feed: RSS · Atom
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.07:*:*:*:*:*:*:*
part: a version: 3.4.07 update: *
| Vendor | Snitz Communications (c55c5b67-cb80-5ff6-bcf0-1396a72b7b4d) |
|---|---|
| Product | Snitz Forums 2000 (4d538b06-44d5-59c0-ac73-9e2d6da18566) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-4827 |
vulnerable | 2026-06-08 04:56:31.229553 |
Details available
Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter. NOTE: some of these details are obtained from third party information.
Published: 2011-08-24T10:00:00.000Z
Updated: 2024-08-07T04:02:29.966Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4826 |
vulnerable | 2026-06-08 04:56:31.229125 |
Details available
SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter. NOTE: some of these details are obtained from third party information.
Published: 2011-08-24T10:00:00.000Z
Updated: 2024-08-07T04:02:29.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4554 |
vulnerable | 2026-06-08 04:51:48.877220 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter to pop_send_to_friend.asp, related to a crafted onload attribute of an IMG element; or (2) an onload attribute in a sound tag.
Published: 2010-01-04T21:00:00.000Z
Updated: 2024-08-07T07:08:37.916Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2530 |
not_vulnerable | 2026-06-08 04:49:07.023215 |
Details available
avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product.
Published: 2006-05-22T23:00:00.000Z
Updated: 2024-08-07T17:51:04.627Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.