Detections
Analytics

CVE-2003-0286

critical

Description

SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/11981

https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0281

http://www.securityfocus.com/bid/7549

http://www.securityfocus.com/bid/35764

http://secunia.com/advisories/35733

http://packetstormsecurity.org/0305-exploits/snitz_exec.txt

http://osvdb.org/56166

http://marc.info/?l=bugtraq&m=105277599131134&w=2

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0067.html

Details

Source: Mitre, NVD

Published: 2003-06-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.02442