From: "Geo" 

"Mike N."  wrote in message
news:6hteb2t9dbr2sa9a98pj3ruko6m5vkh8mt{at}4ax.com...

>    This would be the equivalent of allowing the forum users to upload .ASP
> pages.   It would have to be a big hole in the forum software.

I don't think you would have to upload an asp page, I believe if the data
you are reading using an asp page contains asp code there might be a way to
get it to execute. It works with sql exploits, so it's possible that it
could work with asp the same way although I've never tested it to see what
it would take.

Geo.

--- BBBS/NT v4.01 Flag-5