phpBMS

Show
Ignore:
Timestamp:
01/01/10 23:10:02 (2 years ago)
Author:
brieb
Message:
  • Fixed several SQL injection vulnerabilities
  • Fixed several XSS vulnerabilities due to PHP_SELF and REQUREST_URI
  • Fixed severa path disclosure errors
Files:
1 modified

Legend:

Unmodified
Added
Removed
  • trunk/phpbms/modules/bms/clients_purchasehistory.php

    r702 r704  
    137137        <h1><?php echo $pageTitle ?></h1> 
    138138 
    139         <form action="<?php echo $_SERVER["REQUEST_URI"] ?>" method="post" name="record"> 
     139        <form action="<?php echo htmlentities($_SERVER["REQUEST_URI"]) ?>" method="post" name="record"> 
    140140                <div class="box"> 
    141141                        <p class="timelineP"> 
phpBMS vulnerability assesment provided by Orvant Inc. Copyright © 2010 Kreotek, LLC. All Rights reserved.