CVE-2002-0607

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2002-0607
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html Patch Vendor Advisory
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770 Patch
http://www.iss.net/security_center/static/8898.php Vendor Advisory
http://www.securityfocus.com/bid/4558 Exploit Patch Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html Patch Vendor Advisory
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770 Patch
http://www.iss.net/security_center/static/8898.php Vendor Advisory
http://www.securityfocus.com/bid/4558 Exploit Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*
cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*
History

20 Nov 2024, 23:39

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html - Patch, Vendor Advisory () http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html - Patch, Vendor Advisory
References () http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770 - Patch () http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770 - Patch
References () http://www.iss.net/security_center/static/8898.php - Vendor Advisory () http://www.iss.net/security_center/static/8898.php - Vendor Advisory
References () http://www.securityfocus.com/bid/4558 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/4558 - Exploit, Patch, Vendor Advisory
Information

Published : 2002-06-18 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2002-0607

Mitre link : CVE-2002-0607

CVE.ORG link : CVE-2002-0607

JSON object : View

Products Affected

snitz_communications

  • snitz_forums_2000
CWE
NVD-CWE-Other