CVE-2004-2720 Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email param...
MediumCVSS 4.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| snitz communications snitz forums 2000 | <= 3.4.04 | No fix listed |
References
- forum.snitz.com
- 11895 third-party-advisory vendor-advisory
- 3200 third-party-advisory
- 1010524 patch vdb-entry
- 7190 vdb-entry
- www.sec-tec.co.uk
- 20040617 XSS in Snitz Forum 2000 exploit mailing-list
- 10564 patch vdb-entry
- snitz-input-validation-xss(16444) vdb-entry