Snoopy is a narrowly scoped project with a small vulnerability footprint centered on its namesake product, characterized by input-handling and command-injection weaknesses typical of web-facing and command-line interfaces. Current severity, exploitation status, and exposure details are shown in the live statistics panel alongside this summary.
The number and severity of CVEs published that impact products developed by Snoopy over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-3330HIGH The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary comma | Oct 27, 2005 | 7.5 | 41 | NO | YES |
CVE-2008-4796HIGH The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, a | Oct 30, 2008 | 10.0 | 36 | NO | NO |
CVE-2014-5009CRITICAL Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008. | Mar 31, 2017 | 9.8 | 34 | NO | NO |
CVE-2008-7313CRITICAL The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796. | Mar 31, 2017 | 9.8 | 34 | NO | NO |
CVE-2002-2444CRITICAL Snoopy before 2.0.0 has a security hole in exec cURL | Oct 28, 2019 | 9.8 | 32 | NO | NO |
CVE-2014-5008CRITICAL Snoopy allows remote attackers to execute arbitrary commands. | Mar 31, 2017 | 9.8 | 32 | NO | NO |
CVE-2009-0502MEDIUM Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 | Feb 10, 2009 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Snoopy.
Media articles that mention a CVE ID that affects a product developed by Snoopy — matched by CVE ID, not by vendor name.