| Anonymous | Login | Signup for a new account | 2021-01-18 20:13 GMT |  |
| Main | My View | View Issues | Change Log | Roadmap |
| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
| ID | Project | Category | View Status | Date Submitted | Last Update | ||||
| 0000456 | SiT! | portal | public | 2009-01-31 18:28 | 2009-02-27 16:25 | ||||
| Reporter | paulh | ||||||||
| Assigned To | ivan | ||||||||
| Priority | none | Severity | major | Reproducibility | always | ||||
| Status | closed | Resolution | fixed | ||||||
| Platform | OS | OS Version | |||||||
| Product Version | |||||||||
| Target Version | 3.45 | Fixed in Version | 3.45 | ||||||
| Summary | 0000456: Portal uses unchecked variables | ||||||||
| Description | the portal code uses unchecked variables with a lot of $_REQUESTS and $_POST in SQL statements e.g. close.php | ||||||||
| Tags | security | ||||||||
| Attached Files | |||||||||
 Relationships |
|
 Relationships |
|
Notes |
|
 (0000618)ivan (administrator) 2009-02-11 20:27 |
This was only affecting authenticated connections. Fixed in svn trunk r5069. |
|
Notes |
|
Issue History |
|||
| Date Modified | Username | Field | Change |
| 2009-01-31 18:28 | paulh | New Issue | |
| 2009-02-03 15:16 | ivan | Tag Attached: security | |
| 2009-02-11 20:15 | ivan | Assigned To | => ivan |
| 2009-02-11 20:15 | ivan | Status | new => assigned |
| 2009-02-11 20:15 | ivan | Projection | none => minor fix |
| 2009-02-11 20:15 | ivan | Target Version | => 3.45 |
| 2009-02-11 20:27 | ivan | Note Added: 0000618 | |
| 2009-02-11 20:27 | ivan | Status | assigned => resolved |
| 2009-02-11 20:27 | ivan | Resolution | open => fixed |
| 2009-02-11 20:27 | ivan | Fixed in Version | => Current SVN |
| 2009-02-27 13:54 | ivan | Fixed in Version | Current SVN => 3.45 |
| 2009-02-27 16:25 | ivan | Status | resolved => closed |
|
Issue History |
| Copyright © 2000 - 2021 MantisBT Team |
|