← Back

Snitz Communications

snitz_communications

25 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Avatar Mod
avatar_mod

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Snitz Communications
1Snitz Forums 2000
Apr 16, 2026
Aug 7, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
1Snitz Communications
1Snitz Forums 2000
Apr 16, 2026
Aug 7, 2003
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.
1Snitz Communications
1Snitz Forums 2000
Apr 16, 2026
Jun 16, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
1Snitz Communications
1Snitz Forums 2000
Apr 16, 2026
Jun 25, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
1Snitz Communications
1Snitz Forums 2000
Apr 16, 2026
Jun 18, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INI...Show more
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.Show less