Snitz Forums 2000 SQL injection

The remote host is using Snitz Forum 2000 This version allow an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out maliciou...

CVE-2004-1844

Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...

Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting

Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure...

Expinion.net Member Management System 2.1 - 'error.asp?err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...

Web Wiz Forums ver. 7.01

Informations : °°°°°°°°°°°° Language : ASP Bugged Version : Web Wiz Forums ver. 7.01 and less ? Website : http://www.webwizforums.com Problems : Permanent XSS Objects : °°°°°°° - registernewuser.asp - register.asp The values variable are not filtered: strLocation = Request.Form"location" strMessa...

snitz_exec.txt

Overview: Snitz Forums 2000, one of the best ASP based bulletin board systems on the market. Getting better every day! A complete board system forum that allows the user access to a friendly and intuitive interface. http://forum.snitz.com Problem Description: Snitz Forums 3.3.03 has an SQL...