Archive For May, 2007

IP.Board 2.2.x Possible XSS Issue

It has come to our attention that IP.Board 2.2.x may be vulnerable to an XSS (cross-site scripting) attack by injecting JavaScript into supplementary files used by our rich text editor. It should be noted that this damage is mitigated by the “HttpOnly” cookies which were introduced into IP.Board 2.2.0. This means that sensitive cookies in IP.Board 2.2.0 and higher cannot be read by JavaScript which could be crafted using this issue.

This update is very simple and straightforward and only affects these supplementary files. The attached zip file contains all the required files. Simply upload them over the existing files on your server.

There were zero template changes between vBulletin 3.6.6 and 3.6.7. However I decided to update a few things
*A. Bug Fix*:
The *cobalt skin* (_and the cobalt skin only)_ had an issue with the *search* and *quick links* drop downs not working on the front page. This has been corrected….

To provide better customer service to our vBulletin style customers we have recently transferred rights to most of the CinVin vBulletin styles to another company. This will allow the various styles to be updated as needed and for more rapid response to customer service inquiries. The company…

*All of our skins have been fully updated to the latest vBulletin 3.6.6 release.*
This was a pretty big update so *_all current customers should update their skins_*…
Current customers can just log into their customers area (http://www.extremepixels.com/members/member.php) and grab the new .zip…