CVE-2003-0286

Description

SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/11981

http://secunia.com/advisories/35733

http://osvdb.org/56166

http://marc.info/?l=bugtraq&m=105277599131134&w=2

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3