CVE-2002-0607

Published: Jun 18, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.

Affected (6)

Products: Snitz Communications: Snitz Forums 2000

Snitz Communications

1 product

Snitz Forums 2000

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Snitz Communications Snitz Forums 2000	Version 3.0
Snitz Communications Snitz Forums 2000	Version 3.1 sr4
Snitz Communications Snitz Forums 2000	Version 3.3.01
Snitz Communications Snitz Forums 2000	Version 3.3.02
Snitz Communications Snitz Forums 2000	Version 3.3.03
Snitz Communications Snitz Forums 2000	Version 3.3