Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-9903

Execute javascript in [flash=] BBCode

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 3.0.7-PL1, 3.0.8-RC1
    • Fix Version/s: 3.0.8
    • Component/s: Posting
    • Labels:
      None

      Description

      You can execute javascript by posting it into the flash-bbcode.
      Example: 

      [flash=1,1]javascript:alert(/Guess what?/);[/flash]

      For more details see: 

      https://forum.antichat.ru/showpost.php?p=1775767

        Attachments

          Activity

            People

            Assignee:
            naderman Nils Adermann
            Reporter:
            nickvergessen Joas Schilling [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: