Project

General

Profile

Actions
Copy link

Bug #2385

closed

not htmlescaped inputs

Bug #2385: not htmlescaped inputs

Added by beat over 15 years ago. Updated over 15 years ago.

Status:
Closed
Priority:
Normal
Assignee:
beat
Target version:
2.0
Start date:
08 March 2011
Due date:
% Done:

100%

Estimated time:

Description

cbgroupjive.class.php line 2424:

        return '<input type="text" id="' . $id . '" name="' . $id . '" value="' . $value . '" class="' . $class . '" size="' . $size . '" onchange="' . $onchange . '" />';

This unhtmlescaped vlaue results in a backend XSS vulnerability on searches, at very least.

Related issues 1 (0 open — 1 closed)

Related to CB GroupJive - Bug #2380: Missing htmlspecialchars in html outputClosedbeat08 March 2011

Actions

Updated by beat over 15 years ago Actions
Copy link
 #1

admin.cbgroupjive.html.php has many unescaped outputs, giving potential injections: e.g.:

'<td><a href="javascript: void(0);" onclick="' . $editJs . '">' . $row->name . '</a></td>'

could be safer as (admitting that $editJs is safe::

'<td><a href="javascript: void(0);" onclick="' . $editJs . '">' . htmlspecialchars( $row->name ) . '</a></td>'

Updated by krileon over 15 years ago Actions
Copy link
 #2

  • Status changed from New to Resolved
  • Assignee changed from krileon to beat
  • % Done changed from 0 to 100

Fixed with r1607

Updated by krileon over 15 years ago Actions
Copy link
 #3

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom