#32978 [Ver->Csd]: XSS In php.net

ID: 32978 Updated by: rasmus@php.net Reported By: security at gulftech dot org -Status: Verified +Status: Closed Bug Type: Website problem Operating System: WinXP Pro PHP Version: Irrelevant New Comment: fixed Previous Comments: ------------------------------------------------------------------------ [2005-05-08 21:52:34] security at gulftech dot org also, stuff like this still woks http://bugs.php.net/bug.php/%22%20onclick='alert(document.cookie)';?id=32978 Kind Regards, James ------------------------------------------------------------------------ [2005-05-08 17:44:36] nlopess@php.net Patch: http://mega.ist.utl.pt/~ncpl/php-bugs-web.patch ------------------------------------------------------------------------ [2005-05-08 16:43:33] security at gulftech dot org Description: ------------ One of the most commonly overlooked xss vectors is the unsanatized PHP_SELF call :) I hope this helps. James Reproduce code: --------------- http://bugs.php.net/search.php/%22%3E%3Ciframe%20src=http://www.linuxsecurity.org%3E?cmd=display&status=&search_for=phpinfo+PHP_SELF+cross+site+scripting&php_os=&boolean=0&author_email=&bug_age=0&by=&order_by=&direction=&phpver=&limit=30&assign=&begin=90 Expected result: ---------------- iframe opening an arbitrary location ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=32978&edit=1