[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: XSS vulnerability in phpBB (an other ;-)

To: John Smith <sgaesux@xxxxxxxxxxxx>
Subject: Re: XSS vulnerability in phpBB (an other ;-)
From: Michael Renzmann <security@xxxxxxxxxx>
Date: Tue, 09 Sep 2003 18:39:21 +0200

Hi.

John Smith wrote:

[url=http://www.izhal.com"; onclick=alert("bug");"]test[/url]

Checked that variant with phpBB 2.0.1 again, and it didn't work as well. Seems as this version is not vulnerable.

Bye, Mike

References:
- Re: XSS vulnerability in phpBB (an other ;-)
  - From: John Smith

Prev by Date: Re: Microsoft security update broken?
Next by Date: Re: 11 years of inetd default insecurity?
Previous by thread: Re: XSS vulnerability in phpBB (an other ;-)
Next by thread: Re: XSS vulnerability in phpBB (an other ;-)
Index(es):
- Date
- Thread