From: Mike N. 

On Fri, 14 Jul 2006 06:09:19 -0400, "Geo"  wrote:

>Depending on how the site works, anything that allows
>a web visitor to post unchecked text and then view that text as a web page
>could possibly be used to exploit this if they can get the server to
>interpret that text.

   This would be the equivalent of allowing the forum users to upload .ASP
pages.   It would have to be a big hole in the forum software.   The next
closest thing would be some sort of Server Side Include, but it's not clear
that this could trigger the .ASP vulnerability.

--- BBBS/NT v4.01 Flag-5