Known Vulnerabilities for products from Snitz Communications

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Snitz Communications".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2012-5313 json SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via t... Not Provided 2012-10-08 2026-04-29
CVE-2010-4827 json Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitra... Not Provided 2011-08-24 2026-04-29
CVE-2010-4826 json SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL comma... Not Provided 2011-08-24 2026-04-29
CVE-2009-4554 json Multiple cross-site scripting (XSS) vulnerabilities in Snitz Forums 2000 3.4.07 allow remote attackers to inject arbitrary we... Not Provided 2010-01-04 2026-04-23
CVE-2008-0209 json Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect u... Not Provided 2008-01-10 2026-04-23
CVE-2008-0208 json Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inje... Not Provided 2008-01-10 2026-04-23
CVE-2008-0136 json Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, ... Not Provided 2008-01-08 2026-04-23
CVE-2008-0135 json Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which ... Not Provided 2008-01-08 2026-04-23
CVE-2008-0134 json Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers ... Not Provided 2008-01-08 2026-04-23
CVE-2007-6240 json SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL comman... Not Provided 2007-12-05 2026-04-23
CVE-2007-1374 json Cross-site scripting (XSS) vulnerability in pop_profile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arb... Not Provided 2007-03-10 2026-04-23
CVE-2007-1023 json SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary SQL ... Not Provided 2007-02-21 2026-04-23
CVE-2006-5603 json SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL comm... Not Provided 2006-10-30 2026-04-23
CVE-2006-4796 json Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary... 4.3 - MEDIUM 2006-09-14 2018-10-17
CVE-2006-2959 json SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary ... 7.5 - HIGH 2006-06-12 2018-10-18
CVE-2006-2530 json avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file... 5 - MEDIUM 2006-05-22 2018-10-18
CVE-2005-3411 json Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary ... Not Provided 2005-11-01 2025-04-03
CVE-2004-2720 json Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to i... Not Provided 2004-12-31 2025-04-03
CVE-2004-1687 json CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitt... Not Provided 2004-09-16 2025-04-03
CVE-2003-0494 json password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users... Not Provided 2003-08-07 2025-04-03

Known software with vulnerabilities from Snitz Communications

Type Vendor Product Version
ApplicationSnitz CommunicationsAvatar Mod1.3
ApplicationSnitz CommunicationsSnitz Forums 2000-