Details
-
Type:
Bug
-
Status:
Closed
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 0.9.6.2, 0.9.6.3-rc1, 0.9.6.3-rc2, 0.9.6.3
-
Fix Version/s: Evolution-1.0.0-rc2
-
Component/s: Installation
-
- Environment:
- Windows XP; Firefox 3.0.3
And it might become the cause of XSS vulnerability by 'echo' + $_SERVER['PHP_SELF'].
Using $_SERVER ['SCRIPT_NAME'] or 'htmlspecialchars()' + $_SERVER['PHP_SELF'] is more better.