CVE-2004-2720

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter.

Affected products

Snitz Communications Snitz Forums 2000: through 3.4.04

References

http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360
http://secunia.com/advisories/11895
http://securityreason.com/securityalert/3200
http://securitytracker.com/id?1010524
http://www.osvdb.org/7190
http://www.sec-tec.co.uk/vulnerability/snitzxss.html
http://www.securityfocus.com/archive/1/366309
http://www.securityfocus.com/bid/10564
https://exchange.xforce.ibmcloud.com/vulnerabilities/16444
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360
http://secunia.com/advisories/11895
http://securityreason.com/securityalert/3200

Get alerted when CVE-2004-2720 or the next vulnerability affects your stack