Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-9903

Execute javascript in [flash=] BBCode

          Details

          • Type: Bug
          • Status: Closed (View Workflow)
          • Priority: Blocker
          • Resolution: Fixed
          • Affects Version/s: 3.0.7-PL1, 3.0.8-RC1
          • Fix Version/s: 3.0.8
          • Component/s: Posting
          • Labels:
            None

            Description

            You can execute javascript by posting it into the flash-bbcode.
            Example: 

            [flash=1,1]javascript:alert(/Guess what?/);[/flash]

            For more details see: 

            https://forum.antichat.ru/showpost.php?p=1775767

              Attachments

                Activity

                  People

                  • Assignee:
                    naderman Nils Adermann
                    Reporter:
                    nickvergessen Joas Schilling [X] (Inactive)
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: