Description
SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie.
References
- 1075 third-party-advisory
- 18362 vdb-entry
- snitzforums-incheader-sql-injection(27080) vdb-entry
- http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62049
- 20060610 [KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability mailing-list
- 1016267 vdb-entry
- http://www.kapda.ir/advisory-343.html