quattro Posted December 17, 2003 Posted December 17, 2003 I followed the instruction from the poster on bugtraq who found the above vuln. but it does not work. It gives me a blank page after changing $link .= $separator . $_sid; to $link .= $separator . tep_output_string($_sid); in includes/functions/html_output.php Any tips? I looked at error.log from Apache and do not see any error :( TIA
JeiAr Posted December 17, 2003 Posted December 17, 2003 http://www.oscommerce.com/community/bugs,1546
voided Posted December 18, 2003 Posted December 18, 2003 thats because there is no tep_output_string() function for MS1... there still isn't a fix for this version :( Designrfix.com | Graphic Design Inspiration & Web Design Resources - @designrfix
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.