Waraxe IT Security Portal

chatserv · Replies: 2

On that note the module has another vulnerability where a variable that was left wide open is being exploited: $instory, consider the following block of code:
} elseif ($type=="comment ...

chatserv · Replies: 2

For the last one this should be enough:
if ($type=="stories" OR !$type)
{
if ($category > 0)
{
$categ = "AND catid='$category' &quo ...

chatserv · Replies: 13

That has been the idea since day one, we'll get there eventually.

chatserv · Replies: 13

Thanks for sharing, those look good, i posted a few more at karakas' site mainly concerning the downloads module (unquoted and unsanitized sid variable) and an unsanitized base_64 line in modules.php. ...