ثغرة 4.0.2 PL1 XSS Vunerability ترقيع من دعم في بي

[Sc®iPt]

تم التبليغ عن الثغره بواسطة : http://inj3ct0r.com/exploits/9697


إقتباس من ستيف

An official patch is forthcoming. Meanwhile I have attached a patched type.php file to this message. Unzip that file and upload it, replacing the existing ../vb/search/type.php file

Note: This is for those running 4.0.2 PL1 only.

If for some reason you want to apply this patch yourself, find the following file:

../vb/search/type.php

In that type.php file, find this near the bottom of the file:

'query' => TYPE_STR,

Replace that with this:

'query' => TYPE_NOHTML,

Please note that if you have already applied Paul M's patch here, then you do not have to apply this patch.

ارفع ملف type.php في هذا المسار

At ../vb/search/type.php


تحميل بالمرفقات

[Abouahmed]

تسلم يديك يا محمود

[syrianspider]

شكرا عالباتش

[Sc®iPt]

يرجى متابعة هذا الموضوع للأهمية

http://www.d3m-vb.net/vb/18685-%D8%A...html#post75801