Lucene search

MitreCVE-2003-0286

HistoryJun 16, 2003 - 4:00 a.m.

CVE-2003-0286

2003-06-1604:00:00

CWE-89

mitre

web.nvd.nist.gov

sql injection

vulnerability

snitz forums 2000

nvd

cve-2003-0286

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.003

Percentile

68.6%

JSON

SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.

Affected configurations

Nvd

Node

snitz_communicationssnitz_forums_2000Range≤3.3.03

VendorProductVersionCPE
snitz_communicationssnitz_forums_2000*cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
snitz_communications	snitz_forums_2000	*	cpe:2.3:a:snitz_communications:snitz_forums_2000::::::::

References

archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html

marc.info/?l=bugtraq&m=105277599131134&w=2

osvdb.org/56166

packetstormsecurity.org/0305-exploits/snitz_exec.txt

secunia.com/advisories/35733

www.securityfocus.com/bid/35764

www.securityfocus.com/bid/7549

exchange.xforce.ibmcloud.com/vulnerabilities/11981

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.003

Percentile

68.6%

JSON

Related for CVE-2003-0286