Welcome to the E-Blah Community!
We would like to welcome you to our community and invite you to register an account or login.
Being a registered member is important, as it gives you several advantages over the normal Guest status. After registering you will be able to download files and images, post messages, and access member-only portions of the forum - just to name a few. Registration is quick and simple, and only takes about a minute of your time.

E-Blah Community    Informational    News  ›  [EXPLOIT FIX] JavaScript in URLs and Images
Users Browsing Forum
No Members and 7 Guests

[EXPLOIT FIX] JavaScript in URLs and Images  This thread currently has 1,496 views. Print
1 Pages 1 Recommend Thread
Justin
November 20, 2002, 7:59pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,015
Gender: Male
Posts Per Day: 6.75
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 17 hours 45 minutes
Location: Tallassee, AL
Age: 21
Ok ... for EVERYONE using ANY released version of E-Blah, update your board with THIS mod.


Information from Modification:
Quoted Text
*** SECURITY RELEASE ***

This modification fixes a major security thread to ALL boards. A hacker could use Java - Script in their post, sending your password -- using cookies -- to the user wishing to recieve the information. It is *HIGHLY* recommended you install this mod.

Modifies 1 File: Routines.pl


Risk: Medium to High


To download, click here.

Please note: this HAS not been FULLY tested, and MAY have bugs, bug it is much better to try and plug a whole





I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message
Justin
November 20, 2002, 8:02pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,015
Gender: Male
Posts Per Day: 6.75
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 17 hours 45 minutes
Location: Tallassee, AL
Age: 21
To Install:


Place, "No_Java_Code.v1m" into your "cgi-bin/Blah/Mods" dir, then run Source Code Modification -- Admin/Modification Center, then click, "Install" (if you test, you must click "Back" and then install -- a bug in Mod Center that I just fixed).



- Justin


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message Reply: 1 - 7
osiriss
November 20, 2002, 8:24pm Report to Moderator Report to Moderator

err...
Posts: 177
Gender: Male
Posts Per Day: 0.08
Reputation: 100.00%
Reputation Score: +5 / -0
Location: Montreal, Quebec, Canada
Age: 36
as usual you da man!  Don't you love dedicated people lol
Logged Offline
Private Message Private message ICQ ICQ Reply: 2 - 7
osiriss
November 21, 2002, 3:53pm Report to Moderator Report to Moderator

err...
Posts: 177
Gender: Male
Posts Per Day: 0.08
Reputation: 100.00%
Reputation Score: +5 / -0
Location: Montreal, Quebec, Canada
Age: 36
humm it said text not found error?  But I found out what was the problem.  It's missing one (tab).  I had to find the code myself in the file manually, then I recopied it into the action then the installation went smooth.

here's my mod file if ya wanna compare it to your



Logged Offline
Private Message Private message ICQ ICQ Reply: 3 - 7
s0me0ne
November 27, 2002, 9:01pm Report to Moderator Report to Moderator
E-Blah Member
Posts: 9
Posts Per Day: 0.00
--» Modification: Error :: Not Found in File

I tried both files but got the same error

I then told it to install anyway and it said

Could not find Test.v1m

?what do i do?
Logged
Private Message Private message Reply: 4 - 7
Justin
November 28, 2002, 8:56am Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,015
Gender: Male
Posts Per Day: 6.75
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 17 hours 45 minutes
Location: Tallassee, AL
Age: 21
The fix may only work on 2.4 ... and


To Install:


Place, "No_Java_Code.v1m" into your "cgi-bin/Blah/Mods" dir, then run Source Code Modification -- Admin/Modification Center, then click, "Install" (if you test, you must click "Back" and then install -- a bug in Mod Center that I just fixed).



- Justin


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message Reply: 5 - 7
inetdr
November 29, 2002, 10:59am Report to Moderator Report to Moderator

E-Blah Member
Posts: 26
Gender: Male
Posts Per Day: 0.01
This is what happened to my effort to install
"There are one or more errors, this modification WILL NOT install correctly. Please contact this modifications author."

I have E-Blah 2.5 AWSOME !!!!
Logged Offline
Site Site Private Message Private message Reply: 6 - 7
Justin
November 29, 2002, 2:50pm Report to Moderator Report to Moderator

The E-Blah Developer
E-Blah Programmer
Posts: 15,015
Gender: Male
Posts Per Day: 6.75
Reputation: 93.40%
Reputation Score: +297 / -21
Time Online: 36 days 17 hours 45 minutes
Location: Tallassee, AL
Age: 21
2.5 Needs no update.


I do installs for $25 and upgrades for $20.
Technical support is always free.

  Donate to E-Blah!  

My Websites: Revolution Reality (My Blog)  |  MinistryTalk.com  |  Portfolio

"But you, O Lord, are a compassionate and gracious God, slow to anger, abounding in love and faithfulness." — Psalm 86:15 NIV

Logged Offline
Site Site Private Message Private message Reply: 7 - 7
1 Pages 1 Recommend Thread
Print

E-Blah Community    Informational    News  ›  [EXPLOIT FIX] JavaScript in URLs and Images