Re: phpBB Code EXEC (v2.0.10)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Version 2.0.10 ??? Did you also tried the -latest- phpBB ???

This issue has been reported multiple times and finally resolved over half a year ago. The last known code-injection bug regarding the hilighting code was fixed in phpBB version 2.0.16.

Grt,
 Ron

On Mon, 27 Nov 2005 deane10@xxxxxxxxxxxxx wrote:

Add these into the mod_security rules:

SecFilterSelective ARG_highlight "(\x27|%27|\x2527|%2527)"
SecFilterSelective THE_REQUEST "\x27|%27|\x2527|%2527"

issue resolved...


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux