Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting
From: scott@xxxxxxxxxxxxx
Date: 23 Jun 2006 10:36:28 -0000

We are unable to reproduce this on any of the 3.5.x series or 3.6.x development branch. The userid parameter is run through our filtering system as an unsigned integer.

'userid' => TYPE_UINT

Prev by Date: Re: PHP security (or the lack thereof)
Next by Date: Re: flock d0s exploit remote. beta 1 (v0.7)
Previous by thread: vBulletin<<--v3.5.X "member.php" Cross Site Scripting
Next by thread: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux