CVE-2004-2720

Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.

🔗 References (18)

• cve@mitrehttp://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360
• cve@mitrehttp://secunia.com/advisories/11895
• cve@mitrehttp://securityreason.com/securityalert/3200
• cve@mitrehttp://securitytracker.com/id?1010524
• cve@mitrehttp://www.osvdb.org/7190
• cve@mitrehttp://www.sec-tec.co.uk/vulnerability/snitzxss.html
• cve@mitrehttp://www.securityfocus.com/archive/1/366309
• cve@mitrehttp://www.securityfocus.com/bid/10564
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/16444
• af854a3a-2127-422b-91ae-364da2661108http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/11895
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/3200
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1010524
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/7190
• af854a3a-2127-422b-91ae-364da2661108http://www.sec-tec.co.uk/vulnerability/snitzxss.html