Avatar Script Insertion Vulnerability (Security)

[dcabbar]

Hi All,

Looking at http://secunia.com/advisories/17295/ , it seems possible to embed javascript in images in a special way.

So, if a user provides an avatar that has this, they will be able to hack accounts.

Do you know how this can be avoided?

Thanks.

[Kindred]

that is a report for phpbb, not SMF...

[dcabbar]

Yeah I know, I am just asking how this can be prevented on the server side for SMF too, and/or what SMF does to prevent it.

[SlammedDime]

dcabbar, is this issue resolved or do you require further assistance?