Invision Power Services: BBCode parser exploiting -> IP.Board 3.x -> Tracker

Jump to content

Report ID 21186 Title BBCode parser exploiting
Product IP.Board 3.x Status Fixed (Severity 0 - None Assigned)
Version 3.0.5 Fixed in 3.0.5

Page 1 of 1
  • Cannot start a new Issue
  • You cannot reply to this issue

Issue Timeline Issue Timeline
Report ID #21186: BBCode parser exploiting

#1 User is offline  
Aoyagi Ritsuka 

  • IPB Newbie
  • Group: +Active Customers
  • Posts: 28
  • Joined: 24-September 09
  • Location:Soviet Empire

Posted 07 March 2010 - 11:05 PM

Realized here:

http://community.inv...c/306172-pwned/

The exploit code is sent to support@invisionpower.com.
issue#24346: Posted Image

Page 1 of 1  
  • Cannot start a new Issue
  • You cannot reply to this issue

Replies (1 - 2)

#2 User is offline  
Aoyagi Ritsuka 

  • IPB Newbie
  • Group: +Active Customers
  • Posts: 28
  • Joined: 24-September 09
  • Location:Soviet Empire

Posted 08 March 2010 - 12:41 AM

The page is deleted, so, you should have seen it. Sorry for such a rude example, didn't trusted it'll work out :blush:
issue#24346: Posted Image

#3 User is offline  
Josh 

  • Developer
  • Group: +Active Customers
  • Posts: 6,153
  • Joined: 13-February 02
  • Location:Lynchburg, VA

Posted 08 March 2010 - 04:46 PM

Updating status to: Fixed
Issue fixed in: 3.0.5

Security update has been released
Joshua Williams
Twitter

Page 1 of 1
  • Cannot start a new Issue
  • You cannot reply to this issue

0 User(s) are reading this issue
0 Guests and 0 Anonymous Users


Powered by IP.Tracker 1.3.4 © 2010  IPS, Inc.