Affected file Request

More
10 years 6 months ago #4323 by alex
Affected file Request was created by alex
Affected files
1 Evaluating Regex place numeric entities because html_entity_decode doesn't // do it for us. $str = /plugins/slogin_auth/yahoo/assets/yahoo-yos-social/lib/OpenID/Auth/Yadis/ParseHTML.php
2 Evaluating Regex s. $str = preg_replace('~&#x([0-9a-f]+);~ei', 'chr(hexdec("\\1"))', $str); $str = /plugins/slogin_auth/yahoo/assets/yahoo-yos-social/lib/OpenID/Auth/Yadis/ParseHTML.php

Affected file
/plugins/slogin_auth/yahoo/assets/yahoo-yos-social/lib/OpenID/Auth/Yadis/ParseHTML.php
Explanation
The method preg_replace with evaluate option can execute php code. You should check if this code is part of the original file or was injected.
Snippet
place numeric entities because html_entity_decode doesn't
// do it for us.
$str = preg_replace('~&#x([0-9a-f]+);~ei', 'chr(hexdec("\\1"))', $str);
$str = preg_replace('~&#([0-9]+);~e', 'chr(\\1)', $str);
return $

Affected file
/plugins/slogin_auth/yahoo/assets/yahoo-yos-social/lib/OpenID/Auth/Yadis/ParseHTML.php
Explanation
The method preg_replace with evaluate option can execute php code. You should check if this code is part of the original file or was injected.
Snippet
s.
$str = preg_replace('~&#x([0-9a-f]+);~ei', 'chr(hexdec("\\1"))', $str);
$str = preg_replace('~&#([0-9]+);~e', 'chr(\\1)', $str);

return $str;
}

/**
* Strip single and double quotes off of a string, if

Please Log in to join the conversation.

Powered by Kunena Forum

Last from the forum

    • чет не работает
    • You may have heard about the for a while now, but you still don't dare to visit them. It is time for you to lose your fear of these prostitute websites. Take your mobile phone, and visit it now. The escorts are local prostitutes you can access for a minimum amount.
    • In Component / Yandex Market XML
    • JL Content Fields Filter в настройках полей нет та...
    •   Здравствуйте. joomline.ru/rasshirenija/moduli/jlconten...=m4vw1l4vab486665406 отсюда с гитхаба скачал и установил на джумла версии 4.1.5 со страницы установка расширений. После установки появилась ошибка " Class "Joomla\Plugin\Jlcontentfieldsfilter\Extension\Jlcontentfieldsfilter" not found" Зашел на фтп по пути /plugins/system/ и перенес папку в /plugins сменив namespace. Дальше все по инструкции - в системе активировал плагин. В модулях включил. Захожу в созданное поле - есть стандартные вкладки, вкладки "Параметры фильтрации" нет. Что делать? >>>>>>>>>>>>>>>>>>>>> Hello. joomline.ru/rasshirenija/moduli/jlconten...=m4vw1l4vab486665406 I downloaded version 4.1.5 from GitHub and installed it on Joomla from the extension installation page. After installation, an error occurred: "Class "Joomla\Plugin\Jlcontentfieldsfilter\Extension\Jlcontentfieldsfilter" not found." I went to ftp at /plugins/system/ and moved the link to /plugins, changing the namespace. Then everything according to the instructions - the plugin was activated in the system. It is enabled in the modules. I go to the created field - there are standard tabs, but there is no "Filter parameters" tab. What should I do?  
    • In Modules Joomline / JL Content Fields Filter
    • JL Content Fields Filter в настройках полей нет та...
    • Здравствуйте. joomline.ru/rasshirenija/moduli/jlconten...=m4vw1l4vab486665406 отсюда с гитхаба скачал и установил на джумла версии 4.1.5 со страницы установка расширений. После установки появилась ошибка " Class "Joomla\Plugin\Jlcontentfieldsfilter\Extension\Jlcontentfieldsfilter" not found" Зашел на фтп по пути /plugins/system/ и перенес папку в /plugins сменив namespace. Дальше все по инструкции - в системе активировал плагин. В модулях включил. Захожу в созданное поле - есть стандартные вкладки, вкладки "Параметры фильтрации" нет. Что делать? >>>>>>>>>>>>>>>>>>>>> Hello. joomline.ru/rasshirenija/moduli/jlconten...=m4vw1l4vab486665406 I downloaded version 4.1.5 from GitHub and installed it on Joomla from the extension installation page. After installation, an error occurred: "Class "Joomla\Plugin\Jlcontentfieldsfilter\Extension\Jlcontentfieldsfilter" not found." I went to ftp at /plugins/system/ and moved the link to /plugins, changing the namespace. Then everything according to the instructions - the plugin was activated in the system. It is enabled in the modules. I go to the created field - there are standard tabs, but there is no "Filter parameters" tab. What should I do?
    • In Plugins Joomline / Other plugin
© 2010- JoomLine
The Joomla!® name is used under a limited license from Open Source Matters in the United States and other countries. joomline.net is not affiliated with or endorsed by Open Source Matters or the Joomla! Project.

email: This email address is being protected from spambots. You need JavaScript enabled to view it.