BugTraq
Phorum 3.4 Cross Site Scripting Apr 02 2003 01:19PM
Peter Stöckli (pcs pcsmedia net) (1 replies)
Re: Phorum 3.4 Cross Site Scripting Apr 03 2003 06:26AM
Hagen Kühnel - HagK (hagk hagk de)
Am Mit, 02 Apr 2003, schrieb Peter Stöckli:

> Solution:
> Edit the source code to strip malicious characters from title or escape
> malicious characters using addslashes().

Phorum 2.4.2 is availaible.

and the Phorum Homepage:
###
Phorum 3.4.2 Released - SECURITY NOTICE
Category: New Release Written by brianlmoon at 6:06pm on April 2, 2003
###
http://phorum.org/

hagen
--
16/ 65
In dem Augenblick, wo wir anfangen unsere Freiheitsrechte
einzuschränken, besorgen wird das Geschäft der Terroristen.
Günter Grass

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus