Up to the minute news about the from The Staff Lounge, Your vBulletin Resource. We'll find the latest news so you can chat about here.
Quote:
We have been notified that a vulnerability exists in the profile updating functions of IP.Board 2.2.0 - IP.Board 2.2.2. Although the vulnerability cannot change any authentication credentials such as the email address or password and the vulnerability cannot be used to craft XSS (cross site scripting) attacks it can be used to cause a nuisance by updating another user's AIM name, Yahoo! identity, et. cetera. The update (attached) is a single file update to "sources/action_public/xmlout.php". Manual patch instructions are also supplied. The main download zip has been updated at the time of this announcement. We would like to thank "iMMENSE" for bringing this to our attention. Patch File: http://forums.invisionpower.com/index.php?act=attach&type=post&id=11699Manual Patch Instructions (for power users): http://forums.invisionpower.com/index.php?act=attach&type=post&id=11700
Mon, 11 Jun 2007 16:42:58 -0400 |
Post your comments about this story, and other news here.
Welcome to Your vBulletin Resource
Improve Your Community Today
06-16-2007, 04:08 AM 
Posts: 87
Community Forums 
Similar Threads 
