Description
SQL injection vulnerability in register.asp in Snitz Forums 2000 before 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.
References
- snitz-register-sql-injection(11981) vdb-entry
- http://packetstormsecurity.org/0305-exploits/snitz_exec.txt
- 20030513 Snitz Forum 3.3.03 Remote Command Execution mailing-list
- 35733 third-party-advisory
- 20030512 Snitz Forum 3.3.03 Remote Command Execution mailing-list
- 56166 vdb-entry
- 35764 vdb-entry
- 7549 vdb-entry