Fix bug cross-site scripting (XSS) attacks » DataLife Engine Support

DLEVIET - DataLife Engine Support Home Page

Register | Login
DataLife Engine Support » DataLife Engine » Bug Fix » Fix bug cross-site scripting (XSS) attacks

Fix bug cross-site scripting (XSS) attacks

  • Author: admin;  
  • Views: 1492;  
  • Date: 6 June 2010;  
Problem: Under certain conditions, your site can be attacked XSS. Attacker can steal cookies; browser if administrator use outdated browser. So he can access to authorized area.
View more about XSS : http://en.wikipedia.org/wiki/Cross-site_scripting

Affected version: 7.x - 8.5

The degree of danger: Low

Download the patch and copy to your own server patch: dle7_85_path.zip

This patch applies to all versions: 7.x - 8.5
We encourage you to Register or Login to website under your name.

Relative News

  • Insufficient filtering of incoming data in DaraLife Engine 7.5
  • Lack of filtering incoming data in the module reset your password in DataLi ...
  • Insufficient filtering of incoming data for DLE 9.0
  • Update WYSIWYG editor for DLE 9.6
  • Insufficient filtering of incoming data for DLE 8.5

    • Pakistan

    Posted 7 June 2010 14:26 Register: 2.03.2010
    Thanks..

    Do you know hot to remove title from sub pager

    for example:
    Fix bug cross-site scripting (XSS) attacks >> DataLife Engine Support
    want to remove the bold part from full article pages

    Michael

    Posted 7 June 2010 16:02 Register: 14.03.2010
    thanks

    Pakistan

    Posted 11 June 2010 15:17 Register: 2.03.2010
    no yelp?
    Information
    Members of Guest cannot leave comments.

    Useful Tools

    Popular

    Pagerank Update

      Updates Yandex SEO
      13.04.2012
      16.02.2012
      04.02.2012
      Updates Yandex search
      17.05.2012
      15.05.2012
      12.05.2012
      Updates Yandex Catalogue
      22.05.2012
      21.05.2012
      18.05.2012
      Updates Google
      03.05.2012
      06.02.2012
      08.11.2011

    Find us on Facebook

    Poll

    How do you know DataLife Engine Support?

    Search Engine
    Other DLE Support websites
    Forum
    Friends
    Others

    Sponsor

    Partner

    Add Your Site


    Tags

    3news, antispam, bookmark module, bookmark us, bookmarks, category, compress, css, Datalife (dle) Search Cloud Module, dle, dle 9.3, DLE images effect, DLE Search CLoud Module, dleviet, guest, guest popup, javascript, Lazyload, mid team, module, Multiple, new user, php latestverstion, pingationMod, Please register, popup, recaptcha, register, registration, release, SEO, sexy, sexy bookmark, sexy social bookmarks, Sitemaps, top user module, viet

    Calendar

    «    May 2012    »
    MoTuWeThFrSaSu
     
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    		 

    CATEGORY

    Lastest Comments

    Archive

    May 2012 (4)
    April 2012 (1)
    January 2012 (2)
    December 2011 (2)
    November 2011 (2)
    October 2011 (1)

    Referer

    Google: google search engine dle module
    Google: dle 9.2 english templates
    Google: dr. datalife engine
    Google: dle 9.2
    Yandex.ru: makstron
    Google: dle 9.3 hacking attempt! comment
    Google: dle espa
    Google: datalife engine
    Google: ao thuat bai

    Sponsor

    Contact us in social network

    Facebook

    Twitter


    Copyright © DLEVIET 2011 All Rights Reserved.
    Template for DLE 9.4
    • DLEVIET PR
    • DLEVIET rank
    • counter