blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-06-01 20:29:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed some XSS Bugs

Browse Source
This commit is contained in:
Andreas Österreicher
2020-02-04 14:58:33 +01:00
parent e19533c0ba
commit a66d319581
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cis/index.php
+3 -2
View File
@@ -70,13 +70,14 @@ if(defined('CIS_CHECK_PASSWORD_CHANGE') && CIS_CHECK_PASSWORD_CHANGE==true)
*/
function validURLCheck($param)
{
if(strstr($param,':'))
if (strstr($param,':') || strstr($param,'//'))
{
// Der APP_ROOT muss in der URL vorkommen, sonfern es kein relativer Pfad ist
// HTTPS und HTTP
if(mb_strpos($param, APP_ROOT)!==0
&& mb_strpos(mb_str_replace("http://","https://", $param), APP_ROOT)!==0
&& mb_strpos(mb_str_replace("https://","http://", $param), APP_ROOT)!==0)
&& mb_strpos(mb_str_replace("https://","http://", $param), APP_ROOT)!==0
&& $param != 'about:blank')
{
$text="Dies ist eine automatische Mail.\nEs wurde eine mögliche XSS Attacke durchgefuehrt:\n";
$text.="\nFolgende URL wurde versucht aufzurufen: \n".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
cis/private/stud_in_grp.php
+1 -1
View File
@@ -183,7 +183,7 @@ else
AND studiengang_kz=".$db->db_add_param($_GET['kz']);
if (isset($_GET['sem']))
$qry.=" AND semester=".$db->db_add_param($_GET['sem']);
$qry.=" AND semester=".$db->db_add_param($_GET['sem'], FHC_INTEGER);
if (isset($_GET['verband']))
$qry.=" AND verband=".$db->db_add_param($_GET['verband']);
include/pgsql.class.php
+1 -1
View File
@@ -289,7 +289,7 @@ class basis_db extends db
case FHC_INTEGER:
$var = $this->db_escape($var);
if(!is_numeric($var) && $var!=='')
die('Invalid Integer Parameter detected:'.$var);
die('Invalid Integer Parameter detected');
$var = $this->db_null_value($var, false);
break;