Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: PHP-Nuke block-Forums.php subject vulnerabilities
From: Frog Man (leseulfroghotmail.com)
Date: Tue Apr 01 2003 - 04:48:28 CST
I haven't tested but I don't think addslashes() is a good solution here.
<name=a><input type=hidden name=u
What do you think about :
$title2 = htmlspecialchars($title2, ENT_QUOTES);
>Subject: PHP-Nuke block-Forums.php subject vulnerabilities
>Date: 31 Mar 2003 11:15:54 -0000
>The block-Forums.php file have a vuln if an attacker
>insert a malformatted subject to a topic of Splatt
>Forum. A type of subject is:
>The 'alt' tag is closed by "> and the other text is
>normal html. This bug is very bad if a subject is:
>And prova.php register cokkies in a file.
>Add under "$title2 = stripslashes($title2);" line, this
>"$title2 = addslashes($title2);"
>And now, backward any " there is a backslash!