Nuke Security 2008

Posted on Tuesday, January 29, 2008 @ 10:18:10 UTC in Security
by Raven

Evaders99 writes:  
Another security bug, this time with phpBB. You could possibly delete your entire Private Message inbox, but only if you are logged in and get sent some nasty code.

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability

See the link for the fix

Also if you didn't see the more urgent SQL injection in the Search module...
PHP-Nuke modules/Search/index.php SQL fix is here

 
 
click Related        click Share
 
News ©

Site Info

Last SeenLast Seen
  • vashd1
  • ofigustavo
Server TrafficServer Traffic
  • Total: 482,359,739
  • Today: 10,125
Server InfoServer Info
  • Apr 20, 2024
  • 09:28 am UTC
 
 

Site Navigation