Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: PHP-Nuke Avatar Code injection vulnerability Feb 04 2003 11:14AM
delusion (delusi0n bellsouth net)
This is a follow up to my original email..

First of all i just want to add, that with this vulnerability, it is
possible to change other user's avatars to either text, or to different
images. all you need to find out is their UID and username.

And also i came up with this solution for the problem....

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus