News Feed
Sections




News Archive
Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

Secubos.com:
Cross-Site Scripting Vulnerability in phpFaber
October 31, 2006 @ 11:17:00

A cross-site scripting bug has been announced on the Secuobs.com website for the phpFaber content management system.

Vigilon has reported a vulnerability in phpFaber CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the URL in cms_images/js/htmlarea/htmlarea.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

For complete information on the issue, check out this report.

0 comments voice your opinion now!
security issue crosssite scripting xss phpfaber security issue crosssite scripting xss phpfaber


blog comments powered by Disqus

Similar Posts

Pádraic Brady's Blog: Automatic Output Escaping In PHP & The Real Future Of Preventing XSS

PHP.net: 5.2.9-1 (for Windows) released

ThinkPHP Blog: New Help Center for Chorizo!

PHP Security Consortium: SecurityFocus Newsletters Posted (#328, #327, #320, #319)

PHP.net: PHP 5.2.3 Released


Community Events

Don't see your event here?
Let us know!


release series php7 part2 framework interview conference laravel opinion podcast api example introduction configure symfony2 library performance community application voicesoftheelephpant

All content copyright, 2015 PHPDeveloper.org :: info@phpdeveloper.org - Powered by the Solar PHP Framework