search

kesar / HTMLawed

a highly customizable PHP script to sanitize / make (X)HTML secure against XSS attacks, so users can edit HTML without risk of your site getting compromised by evildoers.
GNU General Public License v2.0
36 stars 17 forks source link

There might be security issue #26

Closed gacekssj4 closed 8 months ago

gacekssj4 commented 8 months ago

Hello, i never used HTMLLawed before, but there might be some concern for security.

Out of nowhere, someone tries to find if we have HtmlLawedTest.php. I have not anlyzed it, but maybe there could be some way to exploit it or this library.

85.215.123.21 - - [15/Jan/2024:07:43:58 +0100] "GET /helpdesk//vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 404 62344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
85.215.123.21 - - [15/Jan/2024:07:43:58 +0100] "GET /index.php//vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 404 62344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
85.215.123.21 - - [15/Jan/2024:07:43:59 +0100] "GET /glpi/vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 404 62344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
85.215.123.21 - - [15/Jan/2024:07:43:59 +0100] "GET /vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 404 62344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
85.215.123.21 - - [15/Jan/2024:07:44:00 +0100] "GET /support//vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 404 62344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
85.215.123.21 - - [15/Jan/2024:07:44:00 +0100] "GET /ticket/vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 404 62344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36"
gacekssj4 commented 8 months ago

Oh. Just noticed someone already posted it in #24