Re: XSS vulnerability in phpBB (an other ;-)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: John Smith <sgaesux@Phreaker.net>
Subject: Re: XSS vulnerability in phpBB (an other ;-)
From: Michael Renzmann <security@dylanic.de>
Date: Tue, 09 Sep 2003 18:39:21 +0200
Cc: bugtraq@securityfocus.com
In-reply-to: <20030909072405.5AB411A01C8@smtp-1.hotpop.com>
Organization: Dylanic GmbH
References: <20030909072405.5AB411A01C8@smtp-1.hotpop.com>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312

Hi.

John Smith wrote:

[url=http://www.izhal.com"; onclick=alert("bug");"]test[/url]

Checked that variant with phpBB 2.0.1 again, and it didn't work as well. Seems as this version is not vulnerable.

Bye, Mike

References:
- Re: XSS vulnerability in phpBB (an other ;-)
  - From: John Smith

Prev by Date: Re: XSS vulnerability in phpBB (an other ;-)
Next by Date: Re: 11 years of inetd default insecurity?
Previous by thread: Re: XSS vulnerability in phpBB (an other ;-)
Next by thread: Re: XSS vulnerability in phpBB (an other ;-)
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux