CVE-2006-4796

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-14 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter (strtopicsortord variable).

Affected products

Snitz Communications Snitz Forums 2000: 3.4.06

References

http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62773
http://secunia.com/advisories/21946
http://securityreason.com/securityalert/1578
http://www.osvdb.org/28832
http://www.securityfocus.com/archive/1/445902/100/0/threaded
http://www.securityfocus.com/archive/1/446043/100/0/threaded
http://www.securityfocus.com/bid/20004
http://www.vupen.com/english/advisories/2006/3632
https://exchange.xforce.ibmcloud.com/vulnerabilities/28921
http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62773
http://secunia.com/advisories/21946
http://securityreason.com/securityalert/1578

Get alerted when CVE-2006-4796 or the next vulnerability affects your stack