CVE-2003-0286 | BDVDB-2026-5446 Detail
Description#
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11981
- http://packetstormsecurity.org/0305-exploits/snitz_exec.txt
- http://marc.info/?l=bugtraq&m=105277599131134&w=2
- http://secunia.com/advisories/35733
- http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html
- http://osvdb.org/56166
- http://www.securityfocus.com/bid/35764
- http://www.securityfocus.com/bid/7549
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.