CVE-2008-0134

CVE-2008-0134

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://hackerscenter.com/archive/view.asp?id=28145 http://secunia.com/advisories/28284 http://www.packetstormsecurity.org/0801-exploits/snitz-multi.txt http://www.securityfocus.com/archive/1/485836/100/200/threaded http://www.securityfocus.com/bid/27162