#41376 [Opn->Csd]: a xss bug on php.net website

ID: 41376 Updated by: bjori@php.net Reported By: dedemoulu at hotmail dot com -Status: Open +Status: Closed Bug Type: Website problem Operating System: not important PHP Version: Irrelevant -Assigned To: +Assigned To: bjori New Comment: This bug has been fixed in CVS. Since the websites are not directly updated from the CVS server, the fix might need some time to spread across the globe to all mirror sites, including PHP.net itself. Thank you for the report, and for helping us make PHP.net better. Previous Comments: ------------------------------------------------------------------------ [2007-05-12 14:44:20] dedemoulu at hotmail dot com Description: ------------ hello, I have discovered a xss bug on php.net website. this xss is on the $_GET['lang'], example: http://fr.php.net/manual-lookup.php?pattern=osef&lang="><script>alert(do cument.cookie)</script> GoodBye, d-day ------------------------------------------------------------------------ [2007-05-12 14:43:01] dedemoulu at hotmail dot com Description: ------------ hello, I have discovered a xss bug on php.net website. this xss is on the $_GET['lang'], example: http://fr.php.net/manual-lookup.php?pattern=osef&lang="><script>alert(document.cookie)</script> GoodBye, André moulu ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=41376&edit=1