Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - Security Issue?
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Security Issue?

 Post Reply Post Reply
Author
lodogg View Drop Down
Groupie
Groupie


Joined: 22 August 2003
Location: United States
Status: Offline
Points: 161
Post Options Post Options   Thanks (0) Thanks(0)   Quote lodogg Quote  Post ReplyReply Direct Link To This Post Topic: Security Issue?
    Posted: 02 October 2003 at 11:45am

I got the message below off my snort IDS system I'm running is this true? I ran IIS lock down and just gave write rights to the *.mdb. And I have the IIS box patched.  Just want to make sure I'm not missing anything:) Here is the link too.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

http://www.snort.org/snort-db/sid.html?sid=2134

Snitz Forums is an Active Server Page (asp) application running on Microsoft Internet Information Server. A vulnerability exists in Snitz Forums that can allow an attacker to inject SQL code of his choice into the application. The file register.asp contains a flaw that can allow an attacker to gain administrator access to the site.

The attacker may be trying to gain administrator access to the host, garner information on users of the system, retrieve sensitive information or be attempting to execute arbitrary code.

 

Disregard THIS just don't use Snitz:)  he he



Edited by lodogg
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2003 at 12:14pm
Your probally better posting on Snitz forums about this but as I recall this was something that effected Snitz forums over a year ago, or at least this looks to be identical to a problem that Snitz suffered from about a year and a half ago.

Try going to the site that produces Sntiz Forums and see if they have a patch to resolve this as this is a bug in Sntiz forums that the IIS lock down tool will not resolve.
Back to Top
lodogg View Drop Down
Groupie
Groupie


Joined: 22 August 2003
Location: United States
Status: Offline
Points: 161
Post Options Post Options   Thanks (0) Thanks(0)   Quote lodogg Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2003 at 12:28pm

Please delete my post:)  I will use Web wiz till I die.  I got freaked out and posted here:)  Is there any known issues with Web Wiz?  It seems alittle slower than I would like it.  Is there a way to go from my *.mdb as a back end to mysql?  And how hard would it be to take the data from the *mdb and import it into mysql?  Is this a impossible feat!



Edited by lodogg
Back to Top
Gullanian View Drop Down
Senior Member
Senior Member
Avatar

Joined: 04 January 2002
Location: England
Status: Offline
Points: 4373
Post Options Post Options   Thanks (0) Thanks(0)   Quote Gullanian Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2003 at 12:30pm
Lots of posts on this already, use search!
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2003 at 12:32pm
There no current security issues with the 7.x version of web wiz forums.

Web Wiz Forums will not work with mySQL but if you want performance then you should go for the MS SQL Server version as MS SQL server is faster than mySQL and Access and the MS SQL server version of Web Wiz Forums also uses stored procedures to make things faster still.
Back to Top
lodogg View Drop Down
Groupie
Groupie


Joined: 22 August 2003
Location: United States
Status: Offline
Points: 161
Post Options Post Options   Thanks (0) Thanks(0)   Quote lodogg Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2003 at 12:48pm
Thanks:)  I will check into it!!
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.