Snitz Forums 2000 - New Security related bug-fix

Snitz Forums 2000

Username:	Password:
Save Password
Forgot your Password?

All Forums

Snitz Forums 2000 DEV-Group

DEV Bug Reports (Closed)

New Security related bug-fix - default.asp

Forum Locked

Topic Locked

Printer Friendly

Author

Topic

Longnt06k
Starting Member

Vietnam
29 Posts

Posted - 17 August 2002 : 10:07:38

Some hacker used script :
----------------------------------------------------
<script removed>
-------------------------------------------------------
to hack my forum , please fix it !!!

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 17 August 2002 : 10:26:14

on line #45 of default.asp

replace this line of code:

Cat_ID = Request.QueryString("CAT_ID")

with this:

if Request.QueryString("CAT_ID") <> "" and IsNumeric(Request.QueryString("CAT_ID")) = True then
	Cat_ID = cLng(Request.QueryString("CAT_ID"))
end if

Longnt06k
Starting Member

Vietnam
29 Posts

Posted - 17 August 2002 : 11:04:23

hey Rick , I think U check file :
+ Members.asp , forum.asp , topics....

Deleted
deleted

4116 Posts

Posted - 17 August 2002 : 13:48:44

Fixed in v4b03patch005 (released now, download link here).

Stop the WAR!

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 17 August 2002 : 16:14:14

quote:
Originally posted by Longnt06k

hey Rick , I think U check file :
+ Members.asp , forum.asp , topics....

those have already been fixed previously.

Longnt06k
Starting Member

Vietnam
29 Posts

Posted - 17 August 2002 : 23:04:17

Are U sure ???
Pop_profile has a bug . SOme hacker input SQL code then change level 1 -> 3.

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 17 August 2002 : 23:18:22

some hacker huh.. there WAS a problem in pop_profile.asp, but it has already been fixed.

http://forum.snitz.com/forum/topic.asp?TOPIC_ID=28275

Topic

Forum Locked

Topic Locked

Printer Friendly

Jump To:

Snitz Forums 2000

This page was generated in 0.17 seconds.