CVE-2008-0134

CVE-2008-0134

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://hackerscenter.com/archive/view.asp?id=28145 http://secunia.com/advisories/28284 http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt http://www.securityfocus.com/archive/1/485836/100/200/threaded http://www.securityfocus.com/bid/27162