Anonymous | Login | Signup for a new account | 2021-04-16 12:28 BST | ![]() |
Main | My View | View Issues | Change Log | Roadmap |
View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||
ID | Project | Category | View Status | Date Submitted | Last Update | ||||
0000456 | SiT! | portal | public | 2009-01-31 18:28 | 2009-02-27 16:25 | ||||
Reporter | paulh | ||||||||
Assigned To | ivan | ||||||||
Priority | none | Severity | major | Reproducibility | always | ||||
Status | closed | Resolution | fixed | ||||||
Platform | OS | OS Version | |||||||
Product Version | |||||||||
Target Version | 3.45 | Fixed in Version | 3.45 | ||||||
Summary | 0000456: Portal uses unchecked variables | ||||||||
Description | the portal code uses unchecked variables with a lot of $_REQUESTS and $_POST in SQL statements e.g. close.php | ||||||||
Tags | security | ||||||||
Attached Files | |||||||||
![]() |
|
ivan (administrator) 2009-02-11 20:27 |
This was only affecting authenticated connections. Fixed in svn trunk r5069. |
![]() |
|||
Date Modified | Username | Field | Change |
2009-01-31 18:28 | paulh | New Issue | |
2009-02-03 15:16 | ivan | Tag Attached: security | |
2009-02-11 20:15 | ivan | Assigned To | => ivan |
2009-02-11 20:15 | ivan | Status | new => assigned |
2009-02-11 20:15 | ivan | Projection | none => minor fix |
2009-02-11 20:15 | ivan | Target Version | => 3.45 |
2009-02-11 20:27 | ivan | Note Added: 0000618 | |
2009-02-11 20:27 | ivan | Status | assigned => resolved |
2009-02-11 20:27 | ivan | Resolution | open => fixed |
2009-02-11 20:27 | ivan | Fixed in Version | => Current SVN |
2009-02-27 13:54 | ivan | Fixed in Version | Current SVN => 3.45 |
2009-02-27 16:25 | ivan | Status | resolved => closed |
Copyright © 2000 - 2021 MantisBT Team |