FIX #4341

2016-01-08 13:57:53 +01:00 · 2016-01-08 13:57:53 +01:00 · 36dc8b1ce7
commit 36dc8b1ce7
parent 0cad938e09
1 changed files with 1 additions and 0 deletions
--- a/htdocs/main.inc.php
+++ b/htdocs/main.inc.php
@ -96,6 +96,7 @@ function test_sql_and_script_inject($val, $type)
    $sql_inj += preg_match('/<script/i', $val);
    if (! defined('NOSTYLECHECK')) $sql_inj += preg_match('/<style/i', $val);
    $sql_inj += preg_match('/base[\s]+href/i', $val);
+    $sql_inj += preg_match('/<.*onmouseover/i', $val);       // onmouseover can be set on img or any html tag like <img title='>' onmouseover=alert(1)>
    if ($type == 1)
    {
        $sql_inj += preg_match('/javascript:/i', $val);