General Discussion - Security Concern???

Print Page | Close Window

Security Concern???

Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: General Discussion
Forum Description: General discussion and chat on any topic.
URL: https://forums.webwiz.net/forum_posts.asp?TID=6631
Printed Date: 30 March 2026 at 7:50am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Security Concern???

Posted By: lodogg
Subject: Security Concern???
Date Posted: 22 October 2003 at 9:40am

http://marc.theaimsgroup.com/?l=bugtraq&m=106677569127792&w=2 - http://marc.theaimsgroup.com/?l=bugtraq&m=10667756912779 2&w=2

Is this true? That would really suck! And if so will there be a fix??

Replies:

Posted By: WebWiz-Bruce
Date Posted: 22 October 2003 at 11:42am

Not only is this a very minor X site scripting issue and absolutly nothing to worry about.

It doesn't effect the latest version, Web Wiz Forums version 7.5.

The person who sumitted this bug track also emailed it to me I tried to responed to him, "HEX" <hex@hex.net.ru>, telling him that the bug track report he submitted to security focus is wrong but the email address is incorrect.

I also emailed securityfocus.com where is was submitted telling them this submission was incorrect but they published it anyway. I have emailed them again demending that they correct it or remove it.

It doesn't effect version 7.5 (the latest version), so no need to wait for a patch
I knew and wrote a fix to this last Easter.
Version 7.01 that this bug report is on doesn't have a file called forum_members.asp so it is incorrect.
Saying that there is no patch for this is incorrect in this bug report as a fix has already been written and this doesn't effect the latest version.

If you are running a version older than 7.5 don't worry to much as this is not a majour concern, it just means that someone can add some info to a querystring (in there own browser) that makes the forum do something it shouldn't, like show an JavaScript alert box, but nothing that is harmful or effect other users.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: lodogg
Date Posted: 22 October 2003 at 12:36pm

Should I upgrade to 7.5? Or will it be more of a pain in the as* I'm running 7.01 with a *.mdb.

Thanks

Posted By: WebWiz-Bruce
Date Posted: 22 October 2003 at 12:49pm

If you look in the web wiz forums forum there is a post on how to upgrade which is releativly simple for access versions.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: lodogg
Date Posted: 22 October 2003 at 1:09pm

Cool thanxs for the help

Posted By: pmormr
Date Posted: 22 October 2003 at 4:33pm

hey borg! can you upgrade from v7.01 to v7.5 by just using the same database? (Basically is there going to be any errors that develop if i just using the same database that i used with v7.01)

-------------
Paul A Morgan

http://www.pmorganphoto.com/" rel="nofollow - http://www.pmorganphoto.com/

Posted By: MadDog
Date Posted: 22 October 2003 at 5:54pm

Do a search pmormr!

-------------
http://www.iportalx.net" rel="nofollow">

Posted By: lodogg
Date Posted: 22 October 2003 at 5:59pm

http://forums.webwiz.net/forum_posts.asp?TID=6136&PN=1 - http://forums.webwiz.net/forum_posts.asp?TID=6136&a mp;PN=1

Here ya go pmormr... I just upgraded my site and there was no problems. But then again I have ms access not sql!