Lucene search

K
cveMitreCVE-2008-0134
HistoryJan 08, 2008 - 7:46 p.m.

CVE-2008-0134

2008-01-0819:46:00
CWE-79
mitre
web.nvd.nist.gov
30
cve-2008-0134
cross-site scripting
xss
forums
snitz forums
security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

62.6%

Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject arbitrary web script or HTML via the MAIL parameter.

Affected configurations

Nvd
Node
snitz_communicationssnitz_forums_2000Range3.4.06
OR
snitz_communicationssnitz_forums_2000Match3.0
OR
snitz_communicationssnitz_forums_2000Match3.1
OR
snitz_communicationssnitz_forums_2000Match3.1sr4
OR
snitz_communicationssnitz_forums_2000Match3.2.03
OR
snitz_communicationssnitz_forums_2000Match3.3
OR
snitz_communicationssnitz_forums_2000Match3.3.01
OR
snitz_communicationssnitz_forums_2000Match3.3.02
OR
snitz_communicationssnitz_forums_2000Match3.3.03
OR
snitz_communicationssnitz_forums_2000Match3.4.02
OR
snitz_communicationssnitz_forums_2000Match3.4.03
OR
snitz_communicationssnitz_forums_2000Match3.4.04
OR
snitz_communicationssnitz_forums_2000Match3.4.05
VendorProductVersionCPE
snitz_communicationssnitz_forums_2000*cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.0cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.1cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.1cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.2.03cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3.01cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3.02cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3.03cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.4.02cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

62.6%

Related for CVE-2008-0134