Invision Power Services: Possible XSS Issue Addressed in IP.Board - Invision Power Services

Jump to content

Subscribe for Updates

Enter your email on our company home page sign up box to subscribe to our company mailing list to receive notifications when we post new announcements along with other news and updates!
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Possible XSS Issue Addressed in IP.Board Rate Topic: -----

#1 User is offline   IPS News Icon

  • Public Relations
  • Icon
  • View blog
  • Group: IPS Staff
  • Posts: 177
  • Joined: 23-September 04
  • Gender:Male

Posted 26 April 2007 - 01:52 PM

Possible XSS Issue Addressed in IP.Board

It has come to our attention that a bug in Internet Explorer 6 and 7 can allow an XSS (cross-site scripting) attack by forcing uploaded image and PDF files to run as HTML which could allow an attack to run code through a user's browser. It should be noted that the XSS damage is significantly mitigated by the "HttpOnly" cookies which were introduced in IP.Board 2.2.0. This means that sensitive cookies in IP.Board 2.2.0 and higher cannot be read by Javascript which could be crafted using this bug.

Although this is a significant flaw within Internet Explorer, we have made a work around to resolve this issue by scanning uploaded files for possible malicious code. If a file is found to contain code that should not exist, such as HTML or Javascript in an image file, the upload will be denied.

The download packages for IP.Board as of this date have been updated to include the patch. To patch an existing installation of IP.Board 2.1.x or 2.2.x, download the appropriate patch file:

Version 2.1.x: Attached File  class_upload.php (12.37K)
Number of downloads: 4484

Version 2.2.x: Attached File  class_upload.php (13.05K)
Number of downloads: 6408

Simply upload the class_upload.php file for your appropriate version into the ips_kernel directory overwriting the existing file.
0
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users