| Package | Affected versions | Patched versions |
|---|---|---|
| snitz forums 2000 | = 3.0= 3.1= 3.3= 3.3.01= 3.3.02= 3.3.03 |
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free