Re: XSS on pear.php.net
| From: | Stig S. Bakken | Date: | Tue, 14 Jan 2003 22:31:14 +0000 |
| Subject: | Re: XSS on pear.php.net | ||
| References: | 1 | Groups: | php.mirrors |
| Request: | Send a blank email to php-mirrors+get-15022@lists.php.net to get a copy of this message | ||
Thanks for the tip. A fix will be deployed shortly.
- Stig
On Tue, 2003-01-14 at 22:36, Peter Suschlik wrote:
> Hi,
>
> while trying `
pear'' on the command line I tried to
> `get'' manually
> and tried this:
>
> http://pear.php.net/get/<a
> href="javascript:alert(23)">
>
> OK, it isn't serious (<script> does not work), but anyway.
>
> I just want you to tell and thank you and other contributers to PEAR
> for PEAR :)
>
> Regards
> Peter Suschlik
>
> P.S.: Sorry, for the crossposts, but I couldn't find the "real" email
> address.