BugTraq
Back to list
|
Post reply
Re: bug in Invision Power Board
Aug 09 2003 09:32PM
Boy Bear (eyal067 walla co il)
In-Reply-To: <20030809082131.25004.qmail (at) www.securityfocus (dot) com [email concealed]>
To repair Bug to edit the file admin.php and to add after the line:
$IN['AD_SESS'] = $HTTP_POST_VARS['adsess'] ? $HTTP_POST_VARS['adsess'] :
$HTTP_GET_VARS['adsess'];
To add this :
if (isset($IN['AD_SESS'])) {
$IN['AD_SESS'] = htmlspecialchars($IN['AD_SESS']);
}
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
To repair Bug to edit the file admin.php and to add after the line:
$IN['AD_SESS'] = $HTTP_POST_VARS['adsess'] ? $HTTP_POST_VARS['adsess'] :
$HTTP_GET_VARS['adsess'];
To add this :
if (isset($IN['AD_SESS'])) {
$IN['AD_SESS'] = htmlspecialchars($IN['AD_SESS']);
}
[ reply ]