CVEvulnerability
CVE-2004-2720
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.
Affected configurations
• snitz communications snitz forums 2000 (<= 3.4.04)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360 forum.snitz.com
- http://secunia.com/advisories/11895 Vendor Advisory
- http://securityreason.com/securityalert/3200 securityreason.com
- http://securitytracker.com/id?1010524 Patch
- http://www.osvdb.org/7190 www.osvdb.org
- http://www.sec-tec.co.uk/vulnerability/snitzxss.html www.sec-tec.co.uk
- http://www.securityfocus.com/archive/1/366309 Exploit
- http://www.securityfocus.com/bid/10564 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16444 exchange.xforce.ibmcloud.com
- http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360 forum.snitz.com
- http://secunia.com/advisories/11895 Vendor Advisory
- http://securityreason.com/securityalert/3200 securityreason.com
- http://securitytracker.com/id?1010524 Patch
- http://www.osvdb.org/7190 www.osvdb.org
- http://www.sec-tec.co.uk/vulnerability/snitzxss.html www.sec-tec.co.uk
- http://www.securityfocus.com/archive/1/366309 Exploit
- http://www.securityfocus.com/bid/10564 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16444 exchange.xforce.ibmcloud.com