Summary
The host is running Snitz and is prone to SQL injection and cross site scripting vulnerabilities.
Impact
Successful exploitation could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Impact Level: Application
Solution
Apply the patch from below link,
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=69770
*****
NOTE : Ignore this warning, if above mentioned patch is applied already.
*****
Insight
- Input passed to the 'M_NAME' parameter in members.asp is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
- Input passed to the 'M_NAME' parameter in members.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
Affected
Snitz Forums 2000 version 3.4.07
References
Severity
Classification
-
CVE CVE-2010-4826, CVE-2010-4827 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities