Re: phpBB Code EXEC (v2.0.10)

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: phpBB Code EXEC (v2.0.10)
From: deane10@xxxxxxxxxxxxx
Date: 27 Nov 2005 23:47:15 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Add these into the mod_security rules:

SecFilterSelective ARG_highlight "(\x27|%27|\x2527|%2527)"
SecFilterSelective THE_REQUEST "\x27|%27|\x2527|%2527"

issue resolved...

Follow-Ups:
- Re: phpBB Code EXEC (v2.0.10)
  - From: Ron van Daal

Prev by Date: ZRCSA-200503 - ktools Buffer Overflow Vulnerability
Next by Date: DNS query spam
Previous by thread: phpBB Code EXEC (v2.0.10)
Next by thread: Re: phpBB Code EXEC (v2.0.10)
Index(es):
- Date
- Thread