BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: phpMyBible 0.5.1 Mutiple XSS
Apr 23 2012 07:07PM
Lostmon gmail com
Hi,
This is a discontinued product from 2007
also we can do a simple patch to all variables here:
####### Vulnerable code ############
$book = $_REQUEST['book'];
$chapter = $_REQUEST['chapter'];
$version = $_REQUEST['version'];
$curl = $_SERVER['REQUEST_URI'];
$searchword = $_REQUEST['searchword'];...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
This is a discontinued product from 2007
also we can do a simple patch to all variables here:
####### Vulnerable code ############
$book = $_REQUEST['book'];
$chapter = $_REQUEST['chapter'];
$version = $_REQUEST['version'];
$curl = $_SERVER['REQUEST_URI'];
$searchword = $_REQUEST['searchword'];...
[ more ]