# Date: 21.12.2006 # Fix to issue mentioned in: Securityfocuse website: http://www.securityfocus.com # Multiple Input Validation Vulnerabilities issue, see http://www.securityfocus.com/bid/21684 for more information. # A correction: the issuse was not discovered by Shaka, but by the security team of web-app.net Shaka happened to release this information to securityfocus, # # Solutions: # 1.)Upgrade to http://www.web-app.net script # 2.)Open index.cgi in a text editor and add this line under: &getver; if ($ENV{QUERY_STRING} =~ /<|>|\<|\>\|/){data_error("Yes! We have no bananas today!"); }# Fix by www.web-app.net for XSS issues discovered by the web-app.net security team 19.09.2006 # 3.)Repeat step 2 for all mods.