bugtraq - Re: Phorum 3.4 Cross Site Scripting

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 3 Apr 2003 08:26:33 +0200
From: Hagen Kühnel - HagK <hagk@...k.de>
To: hagk@...k.de
Subject: Re: Phorum 3.4 Cross Site Scripting


Am Mit, 02 Apr 2003, schrieb Peter Stöckli:

> Solution:
> Edit the source code to strip malicious characters from title or escape 
> malicious characters using addslashes().

Phorum 2.4.2 is availaible. 

and the Phorum Homepage:
###
Phorum 3.4.2 Released - SECURITY NOTICE
 Category: New Release    Written by brianlmoon at 6:06pm on April  2, 2003
### 
http://phorum.org/

hagen
-- 
16/ 65
In dem Augenblick, wo wir anfangen unsere Freiheitsrechte
einzuschränken, besorgen wird das Geschäft der Terroristen.
                                              Günter Grass