[41379] in bugtraq
Re: phpBB Code EXEC (v2.0.10)
daemon@ATHENA.MIT.EDU (deane10@sbcglobal.net)
Mon Nov 28 15:16:49 2005
Date: 27 Nov 2005 23:47:15 -0000
Message-ID: <20051127234715.5959.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: deane10@sbcglobal.net
To: bugtraq@securityfocus.com
Add these into the mod_security rules:
SecFilterSelective ARG_highlight "(\x27|%27|\x2527|%2527)"
SecFilterSelective THE_REQUEST "\x27|%27|\x2527|%2527"
issue resolved...