← Database

CVE-2006-4796

MEDIUM CVSS: 4.3 Published: 2006-09-14 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter (strtopicsortord variable).

Affected Platforms

Snitz Communications Snitz Forums 2000

Weakness Type

NVD-CWE-Other

References