CVE-2006-2959

Published: Jun 12, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie.

Affected (10)

Products: Snitz Communications: Snitz Forums 2000

Snitz Communications

1 product

Snitz Forums 2000

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Snitz Communications Snitz Forums 2000	Version 3.0
Snitz Communications Snitz Forums 2000	Version 3.1 sr4
Snitz Communications Snitz Forums 2000	Version 3.3.01
Snitz Communications Snitz Forums 2000	Version 3.3.02
Snitz Communications Snitz Forums 2000	Version 3.3.03
Snitz Communications Snitz Forums 2000	Version 3.3
Snitz Communications Snitz Forums 2000	Version 3.4.02
Snitz Communications Snitz Forums 2000	Version 3.4.03
Snitz Communications Snitz Forums 2000	Version 3.4.04
Snitz Communications Snitz Forums 2000	Version 3.4.05