Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > rocksolid.shared.security > #79 > unrolled thread
| Started by | Anonymous <poster@anon.com> |
|---|---|
| First post | 2021-02-19 08:04 -0800 |
| Last post | 2021-03-06 07:58 +0000 |
| Articles | 4 — 2 participants |
Back to article view | Back to rocksolid.shared.security
xss in fudforum Anonymous <poster@anon.com> - 2021-02-19 08:04 -0800
Re: xss in fudforum Anonymous <poster@anon.com> - 2021-03-03 12:03 -0800
Re: xss in fudforum Anonymous <poster@anon.com> - 2021-03-03 13:59 -0800
Re: xss in fudforum retro.guy@rocksolidbbs.com (Retro Guy) - 2021-03-06 07:58 +0000
| From | Anonymous <poster@anon.com> |
|---|---|
| Date | 2021-02-19 08:04 -0800 |
| Subject | xss in fudforum |
| Message-ID | <opsec.782.13sp88@anon.com> |
just found this one here: https://www.exploit-db.com/exploits/47650 and turned off def3 at once. not sure when I will turn it back on, seems like there are multiple vulns like this. at least part of those were fixed with 3.1.0, def3 ran 3.0.7. so now i have to basically either rebuild everything from scratch, or i try to just insert the updated php files in my existing installation. hmm....so, def3 will be back, but I guess it will take me a while. cheers trw -- Posted on def2
[toc] | [next] | [standalone]
| From | Anonymous <poster@anon.com> |
|---|---|
| Date | 2021-03-03 12:03 -0800 |
| Message-ID | <opsec.786.kkels@anon.com> |
| In reply to | #79 |
Seems like the manual application of the patch here https://sourceforge.net/p/fudforum/code/6321/ should do the trick. I have to test a little more if this actually closed it. That would save me a ton of time, instead of reinstalling everything. cheers trw -- Posted on def2
[toc] | [prev] | [next] | [standalone]
| From | Anonymous <poster@anon.com> |
|---|---|
| Date | 2021-03-03 13:59 -0800 |
| Message-ID | <opsec.787.4awy5w@anon.com> |
| In reply to | #79 |
>>ee1f26d15744cd0ebf And def3 is back online. cheers trw -- Posted on def2
[toc] | [prev] | [next] | [standalone]
| From | retro.guy@rocksolidbbs.com (Retro Guy) |
|---|---|
| Date | 2021-03-06 07:58 +0000 |
| Message-ID | <693283d3501486e555b0453984c00250$1@news.novabbs.org> |
| In reply to | #82 |
Anonymous wrote: >>>ee1f26d15744cd0ebf > And def3 is back online. Welcome back def3! -- Posted on Rocksolid Light news.novabbs.org
[toc] | [prev] | [standalone]
Back to top | Article view | rocksolid.shared.security
csiph-web