Yogurt Social Network multiple scripts uid variable XSS [Module reviews] - XOOPS Web Application System

XOOPS

Forum

Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk

1

Yogurt Social Network multiple scripts uid variable XSS

2008/8/9 22:39
trabis
Core Developer
Posts: 2269
Since: 2006/9/1 1

(Porting to XOOPS forum)

This issues was reported here:

http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html

You can find on that blog some other XOOPS modules that are not totaly secure.

I hope the author get to read this and release a fix for it.

LatinoPoemas

2

Re: Yogurt Social Network multiple scripts uid variable XSS

2008/8/10 1:34
blackrx
Quite a regular
Posts: 227
Since: 2008/2/5 1

any quick fix...suico seems to be away on vacation if i'm not mistaken

Login

Username

Password

Remember me

Register now! | Lost Password?

Search

Advanced Search

Recent Posts

XOOPS MyMenus 1.54.0 Beta 10

11/18 11:08 Mamba
Re: XOOPS MyMenus 1.54.0 Beta 7

11/18 11:06 Mamba
Re: XOOPS MyMenus 1.54.0 Beta 7

11/16 12:32 liomj
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 18:06 Mamba
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 5:33 liomj
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 5:29 liomj
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 4:39 Mamba
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 3:50 liomj
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 3:31 Mamba
Re: XOOPS MyMenus 1.54.0 Beta 7

11/15 1:48 Mamba

Who's Online

368 user(s) are online (294 user(s) are browsing Support Forums)

Members: 0

Guests: 368

Donat-O-Meter

Stats
Goal:	$100.00
Due Date:	Nov 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}

{{ record.commit.author.name }} {{ record.commit.author.date | formatDate }}