<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
	<channel>
		<title><![CDATA[Latest posts for the topic "Patch for usergent exploit."]]></title>
		<link>https://proxy2.de/forum/posts/list/5.php</link>
		<description><![CDATA[Latest messages posted in the topic "Patch for usergent exploit."]]></description>
		<generator>JForum - http://www.jforum.net</generator>
			<item>
				<title>Patch for usergent exploit.</title>
				<description><![CDATA[ As I posted about a long time ago their is an exploit in Advanced Guestbook whereby HTML can be posted by altering a browser useragent. You can currently see this in posts 7001 and 7002 of this sites guestbook. To patch this open lib/add.class.php and find[code]$agent = addslashes&#40;getenv&#40;&quot;HTTP_USER_AGENT&quot;&#41;&#41;;[/code]<br /> <br /> Replace it with[code]$agent = addslashes&#40;htmlspecialchars&#40;getenv&#40;&quot;HTTP_USER_AGENT&quot;&#41;&#41;&#41;;[/code]]]></description>
				<guid isPermaLink="true">https://proxy2.de/forum/posts/preList/4790/16930.php</guid>
				<link>https://proxy2.de/forum/posts/preList/4790/16930.php</link>
				<pubDate><![CDATA[Wed, 6 Jul 2005 18:54:23]]> GMT</pubDate>
				<author><![CDATA[ Carbonize]]></author>
			</item>
	</channel>
</rss>