[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: phpBB Code EXEC (v2.0.10)
- To: deane10@xxxxxxxxxxxxx
- Subject: Re: phpBB Code EXEC (v2.0.10)
- From: Ron van Daal <ronvdaal@xxxxxx>
- Date: Mon, 28 Nov 2005 21:35:31 +0100 (CET)
Version 2.0.10 ??? Did you also tried the -latest- phpBB ???
This issue has been reported multiple times and finally resolved over half a
year ago. The last known code-injection bug regarding the hilighting code was
fixed in phpBB version 2.0.16.
Grt,
Ron
On Mon, 27 Nov 2005 deane10@xxxxxxxxxxxxx wrote:
Add these into the mod_security rules:
SecFilterSelective ARG_highlight "(\x27|%27|\x2527|%2527)"
SecFilterSelective THE_REQUEST "\x27|%27|\x2527|%2527"
issue resolved...