Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Re: Invision Gallery 2.0.7 SQL Injection Vulnerability Dec 04 2006 06:31AM
emin hasanov com
To fix this, you would need to change forum/modules/gallery/post.php at about line 153

from

if( $this->ipsclass->input['op'] == 'doaddcomment' )
{
$this->process_reply( $this->ipsclass->input['img'] );
}
else
{
$this->reply_form( $this->ipsclass->input['img'] );
}

to

$img = intval($this->ipsclass->input['img']);
if( $this->ipsclass->input['op'] == 'doaddcomment' )
{
$this->process_reply($img);
}
else
{
$this->reply_form( $img );
}

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus