Snitz Forums 2000 Register.ASP SQL Injection Vulnerability

Bugtraq ID:	7549
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2003 12:00AM
Updated:	May 10 2003 12:00AM
Credit:	Discovery of this vulnerability credited to <[email protected]>.
Vulnerable:	Snitz Forums 2000 Snitz Forums 2000 3.3 .03 - Microsoft IIS 5.1 - Microsoft IIS 5.0 - Microsoft IIS 4.0
Not Vulnerable:	Snitz Forums 2000 Snitz Forums 2000 3.4 .03

Snitz Forums 2000 Register.ASP SQL Injection Vulnerability

Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 and MySQL.

It is possible for a remote attacker to inject SQL into queries made by the register.asp script.

Depending on the database implementation used, this may possibly result in sensitive information information in the database being disclosed or may enable the attacker to modify data. There is also the possibility that this issue may be leveraged to exploit vulnerabilities that may exist in the underlying database.

Snitz Forums 2000 Register.ASP SQL Injection Vulnerability

The following exploit was provided:

• /data/vulnerabilities/exploits/snitz_exec.pl

Snitz Forums 2000 Register.ASP SQL Injection Vulnerability

Solution:
Fixes available:


Snitz Forums 2000 Snitz Forums 2000 3.3 .03

• Snitz Forums 2000 sf2k_v34_03.zip
  http://prdownloads.sourceforge.net/sourceforge/sf2k/sf2k_v34_03.zip

Snitz Forums 2000 Register.ASP SQL Injection Vulnerability

References:

• Snitz Forums 2000 Homepage (Snitz Forums 2000)