General Discussion - Security Issue?

Print Page | Close Window

Security Issue?

Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: General Discussion
Forum Description: General discussion and chat on any topic.
URL: https://forums.webwiz.net/forum_posts.asp?TID=6115
Printed Date: 30 March 2026 at 7:50am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Security Issue?

Posted By: lodogg
Subject: Security Issue?
Date Posted: 02 October 2003 at 11:45am

I got the message below off my snort IDS system I'm running is this true? I ran IIS lock down and just gave write rights to the *.mdb. And I have the IIS box patched. Just want to make sure I'm not missing anything:) Here is the link too.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

http://www.snort.org/snort-db/sid.html?sid=2134 - http://www.snort.org/snort-db/sid.html?sid=2134

Snitz Forums is an Active Server Page (asp) application running on Microsoft Internet Information Server. A vulnerability exists in Snitz Forums that can allow an attacker to inject SQL code of his choice into the application. The file register.asp contains a flaw that can allow an attacker to gain administrator access to the site.

The attacker may be trying to gain administrator access to the host, garner information on users of the system, retrieve sensitive information or be attempting to execute arbitrary code.

Disregard THIS just don't use Snitz:) he he

Replies:

Posted By: WebWiz-Bruce
Date Posted: 02 October 2003 at 12:14pm

Your probally better posting on Snitz forums about this but as I recall this was something that effected Snitz forums over a year ago, or at least this looks to be identical to a problem that Snitz suffered from about a year and a half ago.

Try going to the site that produces Sntiz Forums and see if they have a patch to resolve this as this is a bug in Sntiz forums that the IIS lock down tool will not resolve.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: lodogg
Date Posted: 02 October 2003 at 12:28pm

Please delete my post:) I will use Web wiz till I die. I got freaked out and posted here:) Is there any known issues with Web Wiz? It seems alittle slower than I would like it. Is there a way to go from my *.mdb as a back end to mysql? And how hard would it be to take the data from the *mdb and import it into mysql? Is this a impossible feat!

Posted By: Gullanian
Date Posted: 02 October 2003 at 12:30pm

Lots of posts on this already, use search!

Posted By: WebWiz-Bruce
Date Posted: 02 October 2003 at 12:32pm

There no current security issues with the 7.x version of web wiz forums.

Web Wiz Forums will not work with mySQL but if you want performance then you should go for the MS SQL Server version as MS SQL server is faster than mySQL and Access and the MS SQL server version of Web Wiz Forums also uses stored procedures to make things faster still.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: lodogg
Date Posted: 02 October 2003 at 12:48pm

Thanks:) I will check into it!!