Evet Arkadaşlar Yanlış Görmediniz yada okumadınız SMF rc3 te açık tespit edildi
açık kapatmak için bu modu bulmuşlar açıkları tamamiyle kapatıyo ayrıntılı bilgi için
www.simplemachines.orgDownload link:
http://rapidshare.com/files/1207117/smf_patch_1-0-9_1-1-rc3-1_1__1_.tar.gz.htmlManuel Kurulumu
changelog.txt bunu aç
SMF 1.1 RC3 August 21, 2006
SMF 1.1 RC3-1 October 29,2006
================================================================================
October 2006
--------------------------------------------------------------------------------
! Some search parameters weren't being sanatized when accessing a previous search, leading to a potential XSS vulnerability (PersonalMessage.php, Search.php)
! Minor typo in PlushSearch2 prevented "user" search parameter from being remembered when trying to access a previous search (Search.php)
! Fixed a problem with the cur_cat parameter when adding a new board. (ManageBoards.php)
! Prevent users without access to any boards from causing a query error when using the unread posts search. (Recent.php)
! Make sure to clean all strings when registering a new member. (Register.php)
SMF 1.1 RC3 August 21, 2006
sources klasöründeki PersonalMessage.php aç
* Software Version: SMF 1.1 RC3 *
* Software Version: SMF 1.1 RC3-1 *
$context['search_params']['userspec'] = htmlspecialchars(stripslashes($context['search_params']['userspec']));
if (!empty($context['search_params']['searchtype']))
$context['search_params']['searchtype'] = 2;
if (!empty($context['search_params']['minage']))
$context['search_params']['minage'] = (int) $context['search_params']['minage'];
if (!empty($context['search_params']['maxage']))
$context['search_params']['maxage'] = (int) $context['search_params']['maxage'];
$context['search_params']['subject_only'] = !empty($context['search_params']['subject_only']);
$context['search_params']['show_complete'] = !empty($context['search_params']['show_complete']);
sources klaösründeki Search.php aç
* Software Version: SMF 1.1 RC3 *
* Software Version: SMF 1.1 RC3-1 *
if (isset($context['search_params']['userspec']))
$context['search_params']['userspec'] = htmlspecialchars(stripslashes($context['search_params']['userspec']));
if (!empty($context['search_params']['searchtype']))
$context['search_params']['searchtype'] = 2;
if (!empty($context['search_params']['minage']))
$context['search_params']['minage'] = (int) $context['search_params']['minage'];
if (!empty($context['search_params']['maxage']))
$context['search_params']['maxage'] = (int) $context['search_params']['maxage'];
$context['search_params']['show_complete'] = !empty($context['search_params']['show_complete']);
$context['search_params']['subject_only'] = !empty($context['search_params']['subject_only']);
if (!empty($search_params['user_spec']) || (!empty($_REQUEST['userspec']) && $_REQUEST['userspec'] != '*'))
if (!empty($search_params['userspec']) || (!empty($_REQUEST['userspec']) && $_REQUEST['userspec'] != '*'))
sources ManageBoards.php bunu aç
* Software Version: SMF 1.1 RC3 *
* Software Version: SMF 1.1 RC3-1 *
$boardOptions['target_category'] = $_POST['cur_cat'];
$boardOptions['target_category'] = (int) $_POST['cur_cat'];
sources Recent.php bunu aç
* Software Version: SMF 1.1 RC3 *
* Software Version: SMF 1.1 RC3-1 *
$query_this_board = 'b.ID_BOARD IN (' . implode(', ', $boards) . ')';
// If this category has a significant number of posts in it...
if (empty($boards))
fatal_lang_error('error_no_boards_selected', false);
$query_this_board = 'b.ID_BOARD IN (' . implode(', ', $boards) . ')';
// If this category has a significant number of posts in it...
$query_this_board = 'b.ID_BOARD IN (' . implode(', ', $boards) . ')';
// If these boards have a significant number of posts in them...
if (empty($boards))
fatal_lang_error('error_no_boards_selected', false);
$query_this_board = 'b.ID_BOARD IN (' . implode(', ', $boards) . ')';
// If these boards have a significant number of posts in them...
sources Register.php bunu aç
* Software Version: SMF 1.1 RC3 *
* Software Version: SMF 1.1 RC3-1 *
$regOptions['extra_register_vars'][$var] = '\'' . $_POST[$var] . '\'';
$regOptions['extra_register_vars'][$var] = '\'' . htmlspecialchars($_POST[$var]) . '\'';
