|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: phpBB Code EXEC (v2.0.10)
From: Ron van Daal (ronvdaal
n1x.nl)
Date: Mon Nov 28 2005 - 14:35:31 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Version 2.0.10 ??? Did you also tried the -latest- phpBB ???
This issue has been reported multiple times and finally resolved over half a year ago. The last known code-injection bug regarding the hilighting code was fixed in phpBB version 2.0.16.
Grt,
Ron
On Mon, 27 Nov 2005 deane10sbcglobal.net wrote:
> Add these into the mod_security rules:
>
> SecFilterSelective ARG_highlight "(\x27|%27|\x2527|%2527)"
> SecFilterSelective THE_REQUEST "\x27|%27|\x2527|%2527"
>
> issue resolved...
>
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]