Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
BugTraq
Back to list
|
Post reply
Re: Invision Gallery 2.0.7 SQL Injection Vulnerability
Dec 04 2006 06:31AM
emin hasanov com
To fix this, you would need to change forum/modules/gallery/post.php at about line 153
from
if( $this->ipsclass->input['op'] == 'doaddcomment' )
{
$this->process_reply( $this->ipsclass->input['img'] );
}
else
{
$this->reply_form( $this->ipsclass->input['img'] );
}
to
$img = intval($this->ipsclass->input['img']);
if( $this->ipsclass->input['op'] == 'doaddcomment' )
{
$this->process_reply($img);
}
else
{
$this->reply_form( $img );
}
[ reply ]
Privacy Statement
Copyright 2009, SecurityFocus
from
if( $this->ipsclass->input['op'] == 'doaddcomment' )
{
$this->process_reply( $this->ipsclass->input['img'] );
}
else
{
$this->reply_form( $this->ipsclass->input['img'] );
}
to
$img = intval($this->ipsclass->input['img']);
if( $this->ipsclass->input['op'] == 'doaddcomment' )
{
$this->process_reply($img);
}
else
{
$this->reply_form( $img );
}
[ reply ]