Snitz Forums 2000 Cross Site Scripting Vulnerability

Bugtraq ID:	7381
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 17 2003 12:00AM
Updated:	Apr 17 2003 12:00AM
Credit:	Discovery of this vulnerability credited to <[email protected]>.
Vulnerable:	Snitz Forums 2000 Snitz Forums 2000 3.3 .03 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0 Snitz Forums 2000 Snitz Forums 2000 3.3 .02 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0 Snitz Forums 2000 Snitz Forums 2000 3.3 .01 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0 Snitz Forums 2000 Snitz Forums 2000 3.3 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0 Snitz Forums 2000 Snitz Forums 2000 3.1 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0 Snitz Forums 2000 Snitz Forums 2000 3.0 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0
Not Vulnerable:

Snitz Forums 2000 Cross Site Scripting Vulnerability

A cross site scripting vulnerability has been reported for Snitz Forums 2000.

The vulnerability exists due to insufficient sanitization of user-supplied values. Specifically, TAB characters are not properly sanitized from <IMG> tags.

Snitz Forums 2000 Cross Site Scripting Vulnerability

There is no exploit code required.

Snitz Forums 2000 Cross Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Snitz Forums 2000 Cross Site Scripting Vulnerability

References:

• Snitz Forums 2000 Homepage (Snitz Forums 2000)
  
• CrossSite Scripting @ Snitz Forums 2000 ()