Some early Web forum software packages were vulnerable to SQLi and XSS and that was pretty nifty. What I found more entertaining was that two of the biggest na

Some early Web forum software packages were vulnerable to SQLi and XSS and that was pretty nifty. What I found more entertaining was that two of the biggest names of the era were also vulnerable to commands to terminate forum text entry boxes, and begin displaying other parts of the page. Thus, a creative security tester could end the text fields box, and add commands to display other things. Because part of this was interpreted server side, and partly client side, it was like a two for 1 enabling command execution server-side, and opening up the door for client side nefariousness too. Providing a handy working link to download the SAM file on Windows from the repair directory, or output /etc/shadow