CVE-2008-0135

Published: Jan 8, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum/snitz_forums_2000.mdb.

Affected (13)

Products: Snitz Communications: Snitz Forums 2000

Snitz Communications

1 product

Snitz Forums 2000

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Snitz Communications Snitz Forums 2000	Up to 3.4.06
Snitz Communications Snitz Forums 2000	Version 3.0
Snitz Communications Snitz Forums 2000	Version 3.1
Snitz Communications Snitz Forums 2000	Version 3.1 sr4
Snitz Communications Snitz Forums 2000	Version 3.2.03
Snitz Communications Snitz Forums 2000	Version 3.3.01
Snitz Communications Snitz Forums 2000	Version 3.3.02
Snitz Communications Snitz Forums 2000	Version 3.3.03
Snitz Communications Snitz Forums 2000	Version 3.3
Snitz Communications Snitz Forums 2000	Version 3.4.02
Snitz Communications Snitz Forums 2000	Version 3.4.03
Snitz Communications Snitz Forums 2000	Version 3.4.04
Snitz Communications Snitz Forums 2000	Version 3.4.05