Re: PHP Code Snippet Library Multiple Cross-Site Scripting (XSS) Vulnerabilities
From: at (stuartc1_at_securityfocus.com)
Date: 07/26/05
- Previous message: thegreatone2176_at_yahoo.com: "PhpList Sql Injection and Path Disclosure"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 26 Jul 2005 09:37:32 -0000 To: bugtraq@securityfocus.com('binary' encoding is not supported, stored as-is) Hi,
This is a bugus bug report, I've tested this on both v0.8 and v0.9 and no problems.
Please remove this bug as it gives a bad name to the project.
It is possible to pass fake variables (as with most systems), but not executable code!! which is not a security issue.
If I'm missing something, please email me with details info. But as far as I can see this is a bugus report.
Stuart
- Previous message: thegreatone2176_at_yahoo.com: "PhpList Sql Injection and Path Disclosure"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]