Lucene search

[email protected]NVD:CVE-2008-0209

HistoryJan 10, 2008 - 12:46 a.m.

CVE-2008-0209

2008-01-1000:46:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

68.5%

JSON

Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitrary web sites via a URL in the target parameter.

Affected configurations

Nvd

Node

snitz_communicationssnitz_forums_2000Range≤3.4.06

snitz_communicationssnitz_forums_2000Match3.0

snitz_communicationssnitz_forums_2000Match3.1

snitz_communicationssnitz_forums_2000Match3.1sr4

snitz_communicationssnitz_forums_2000Match3.2.03

snitz_communicationssnitz_forums_2000Match3.3

snitz_communicationssnitz_forums_2000Match3.3.01

snitz_communicationssnitz_forums_2000Match3.3.02

snitz_communicationssnitz_forums_2000Match3.3.03

snitz_communicationssnitz_forums_2000Match3.4.02

snitz_communicationssnitz_forums_2000Match3.4.03

snitz_communicationssnitz_forums_2000Match3.4.04

snitz_communicationssnitz_forums_2000Match3.4.05

VendorProductVersionCPE
snitz_communicationssnitz_forums_2000*cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.0cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.1cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.1cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.2.03cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3.01cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3.02cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.3.03cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*
snitz_communicationssnitz_forums_20003.4.02cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
snitz_communications	snitz_forums_2000	*	cpe:2.3:a:snitz_communications:snitz_forums_2000::::::::
snitz_communications	snitz_forums_2000	3.0	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:::::::*
snitz_communications	snitz_forums_2000	3.1	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:::::::*
snitz_communications	snitz_forums_2000	3.1	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4::::::
snitz_communications	snitz_forums_2000	3.2.03	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:::::::*
snitz_communications	snitz_forums_2000	3.3	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:::::::*
snitz_communications	snitz_forums_2000	3.3.01	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:::::::*
snitz_communications	snitz_forums_2000	3.3.02	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:::::::*
snitz_communications	snitz_forums_2000	3.3.03	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:::::::*
snitz_communications	snitz_forums_2000	3.4.02	cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:::::::*

Rows per page:

1-10 of 131

References

hackerscenter.com/archive/view.asp?id=28145

www.packetstormsecurity.org/0801-exploits/snitz-multi.txt

www.securityfocus.com/archive/1/485836/100/200/threaded

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

High

EPSS

0.003

Percentile

68.5%

JSON

Related for NVD:CVE-2008-0209

cvelist1 cve1 prion1