Bugtraq mailing list archives
Re: phpBB Code EXEC (v2.0.10)
From: Ron van Daal <ronvdaal () n1x nl>
Date: Mon, 28 Nov 2005 21:35:31 +0100 (CET)
Version 2.0.10 ??? Did you also tried the -latest- phpBB ??? This issue has been reported multiple times and finally resolved over half a year ago. The last known code-injection bug regarding the hilighting code was fixed in phpBB version 2.0.16. Grt, Ron On Mon, 27 Nov 2005 deane10 () sbcglobal net wrote:
Add these into the mod_security rules: SecFilterSelective ARG_highlight "(\x27|%27|\x2527|%2527)" SecFilterSelective THE_REQUEST "\x27|%27|\x2527|%2527" issue resolved...
Current thread:
- Re: phpBB Code EXEC (v2.0.10) deane10 (Nov 28)
- Re: phpBB Code EXEC (v2.0.10) Ron van Daal (Nov 28)