Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities

Bugtraq ID:	45381
Class:	Input Validation Error
CVE:	CVE-2010-4826 CVE-2010-4827
Remote:	Yes
Local:	No
Published:	Dec 13 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Stefano Angaran, via Secunia.
Vulnerable:	Snitz Forums 2000 Snitz Forums 2000 3.4.7
Not Vulnerable:

Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities

Snitz Forums 2000 is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Snitz Forums 2000 3.4.07 is vulnerable; other versions may also be affected.

Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities

An attacker can exploit these issues through a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities

Solution:
Updates are available; please see the references for more information.

Snitz Forums 2000 'members.asp' SQL Injection and Cross Site Scripting Vulnerabilities

References:

• Snitz Forums 2000 Homepage (Snitz Forums 2000)
  
• New security fix, members.asp (Snitz Communications)