Total vulnerabilities in the database
SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie.
| Software | From | Fixed in |
|---|---|---|
| snitz_communications / snitz_forums_2000 | 3.1-sr4 | 3.1-sr4.x |
| snitz_communications / snitz_forums_2000 | 3.4.03 | 3.4.03.x |
| snitz_communications / snitz_forums_2000 | 3.3.01 | 3.3.01.x |
| snitz_communications / snitz_forums_2000 | 3.3.02 | 3.3.02.x |
| snitz_communications / snitz_forums_2000 | 3.4.05 | 3.4.05.x |
| snitz_communications / snitz_forums_2000 | 3.4.02 | 3.4.02.x |
| snitz_communications / snitz_forums_2000 | 3.4.04 | 3.4.04.x |
| snitz_communications / snitz_forums_2000 | 3.0 | 3.0.x |
| snitz_communications / snitz_forums_2000 | 3.3 | 3.3.x |
| snitz_communications / snitz_forums_2000 | 3.3.03 | 3.3.03.x |