Vulnerabilities > Snitz Communications > Snitz Forums 2000 > 3.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2002-06-18 | CVE-2002-0607 | SQL Injection vulnerability in Snitz Forums 2000 Members.ASP members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL. | 7.5 |