Yogurt Social Network multiple scripts uid variable XSS [Module reviews]

XOOPS

Forum

Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk

Yogurt Social Network multiple scripts uid variable XSS

2008/8/9 22:39
trabis
Core Developer
Posts: 2269
Since: 2006/9/1 1

(Porting to XOOPS forum)

This issues was reported here:

http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html

You can find on that blog some other XOOPS modules that are not totaly secure.

I hope the author get to read this and release a fix for it.

LatinoPoemas

Re: Yogurt Social Network multiple scripts uid variable XSS

2008/8/10 1:34
blackrx
Quite a regular
Posts: 227
Since: 2008/2/5 1

any quick fix...suico seems to be away on vacation if i'm not mistaken

Login

Username

Password

Remember me

Search

Advanced Search

Donat-O-Meter

Stats
Goal:	$100.00
Due Date:	Apr 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}

{{ record.commit.author.name }} {{ record.commit.author.date | formatDate }}

Yogurt Social Network multiple scripts uid variable XSS

Re: Yogurt Social Network multiple scripts uid variable XSS

Login

Search

Recent Posts

Re: Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Re: NewBB v 5.1.0 b 6

Re: NewBB v 5.1.0 b 6

NewBB v 5.1.0 b 6

Re: XOOPS 2.5.11 search user is not working

Re: oledrion

Re: oledrion

Re: oledrion

Re: oledrion

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}