Hi all,

The Acronym Mod which is included in phpBB XS 2 Build 058b is Vulnerable and should be fixed ASAP.
Please make these codechanges in the file /adm/admin_acronyms.php

OPEN admin_acronyms.php

FIND
Code: [Download] [Hide] [Select]
$acronym_id = ( isset($_GET['id']) ) ? $_GET['id'] : 0;

REPLACE WITH
Code: [Download] [Hide] [Select]
$acronym_id = ( isset($_GET['id']) ) ? intval($_GET['id']) : 0;


FIND
Code: [Download] [Hide] [Select]
$acronym_id = ( isset($_POST['id']) ) ? $_POST['id'] : 0;

REPLACE WITH
Code: [Download] [Hide] [Select]
$acronym_id = ( isset($_POST['id']) ) ? intval($_POST['id']) : 0;


FIND
Code: [Download] [Hide] [Select]
$acronym_id = ( isset($_POST['id']) ) ? $_POST['id'] : $_GET['id'];

REPLACE WITH
Code: [Download] [Hide] [Select]
$acronym_id = ( isset($_POST['id']) ) ? intval($_POST['id']) : intval($_GET['id']);


Thanks MG to FIX.

Greets