Описание
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
Ссылки
- Exploit
- Vendor Advisory
- ExploitPatch
- ExploitPatch
- Exploit
- Vendor Advisory
- ExploitPatch
- ExploitPatch
Уязвимые конфигурации
Конфигурация 1Версия до 3.3.03 (включая)
cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.01011
Низкий
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
EPSS
Процентиль: 76%
0.01011
Низкий
7.5 High
CVSS2
Дефекты
CWE-89