7.5
CVE-2002-0329
- EPSS 4.94%
- Veröffentlicht 25.06.2002 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:57:13
- Erkennungen
Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Snitz Communications ≫ Snitz Forums 2000 Version 3.0
Snitz Communications ≫ Snitz Forums 2000 Version 3.1 Update sr4
Snitz Communications ≫ Snitz Forums 2000 Version 3.2.03
Snitz Communications ≫ Snitz Forums 2000 Version 3.3
Snitz Communications ≫ Snitz Forums 2000 Version 3.3.01
Snitz Communications ≫ Snitz Forums 2000 Version 3.3.02
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.94% | 0.91 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660
http://marc.info/?l=bugtraq&m=101485184605149&w=2
http://online.securityfocus.com/archive/1/258981
http://www.iss.net/security_center/static/8309.php
http://www.kb.cert.org/vuls/id/132011
http://www.securityfocus.com/bid/4192