Closed evi1m0 closed 9 years ago
I will do some testing with this. The proposed fix looks good except I think we should use our sanitizeHTML function instead of calling PHPs htmlspecialchars function directly.
Okay so the problem is coming in where that search field is being ran through sanitzeHTML, but it's still letting some characters get through that shouldn't be.
This is a very good :)
Vulnerability analysis
file: /var/www/esotalk/core/lib/functions.general.php
R func return, Find a use case:
file: /var/www/esotalk/core/controllers/ETMembersController.class.php
$searchString = R("search"),payload here:
Fix
file: /var/www/esotalk/core/lib/functions.general.php